CVE-2019-16544

Name of the Vulnerable Software and Affected Versions Jenkins QMetry for JIRA - Test Management Plugin versions 1.12 and earlier

Description The issue concerns the storage of credentials in an unencrypted manner in job config.xml files on the Jenkins master or controller. This allows users with Extended Read permission or access to the master or controller file system to view these credentials. The problem arises as part of the post-build step configuration.

Recommendations For Jenkins QMetry for JIRA - Test Management Plugin versions 1.12 and earlier, reconfigure the job to save the credentials encrypted by resaving the job configuration.