Jenkins Bumblebee HP ALM Plugin 4.1.5 and earlier stores credentials unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade jenkins | Oct 1, 2024 | Jan 13, 2021 |
| Jenkins 2021 01 13 | — | If installed, upgrade Bumblebee HP ALM Plugin to version 4.1.6 or later | Dec 2, 2021 | Jan 13, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub