CVE-2019-16572

Name of the Vulnerable Software and Affected Versions Jenkins Weibo Plugin versions 1.0.1 and earlier

Description The issue allows credentials to be stored unencrypted in the global configuration file on the Jenkins master. This can be viewed by users with access to the master file system.

Recommendations For Jenkins Weibo Plugin versions 1.0.1 and earlier, consider restricting access to the master file system to minimize the risk of credential exposure until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.