https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T15:20:00.592828+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-04644 cnvd-2021-04644 2026-10-16T15:20:00.597226+00:00 cnvd-2021-04644 https://cve.radiocsirt.org/vuln/euvd-2026-22302 EUVD-2026-22302 2026-10-16T15:20:00.597259+00:00 EUVD-2026-22302 https://cve.radiocsirt.org/vuln/fkie_cve-2021-21614 fkie_cve-2021-21614 2026-10-16T15:20:00.597273+00:00

Jenkins Bumblebee HP ALM Plugin 4.1.5 and earlier stores credentials unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system.

 https://cve.radiocsirt.org/vuln/ghsa-8v72-qr3h-c6rv GHSA-8v72-qr3h-c6rv — Credentials stored in plain text by Jenkins Bumblebee HP ALM Plugin 2026-10-16T15:20:00.597300+00:00

Affected: Maven: org.jenkins-ci.plugins:bumblebee

Jenkins Bumblebee HP ALM Plugin 4.1.5 and earlier stores credentials unencrypted in its global configuration file `com.agiletestware.bumblebee.BumblebeeGlobalConfig.xml` on the Jenkins controller as part of its configuration.

These credentials can be viewed by users with access to the Jenkins controller file system.

Jenkins Bumblebee HP ALM Plugin 4.1.6 stores credentials encrypted once its configuration is saved again.

 https://cve.radiocsirt.org/vuln/gsd-2021-21614 gsd-2021-21614 2026-10-16T15:20:00.597326+00:00 gsd-2021-21614