CVE-2017-1000113

Name of the Vulnerable Software and Affected Versions Deploy to container Plugin (affected versions not specified)

Description The issue concerns the storage of passwords in the Deploy to container Plugin. Previously, passwords were stored unencrypted as part of the plugin's configuration, allowing users with local file system access to the Jenkins master or Extended Read access to the jobs to retrieve these passwords. The plugin now integrates with the Credentials Plugin to securely store passwords and automatically migrates existing passwords.

Recommendations For the Deploy to container Plugin, update the plugin to integrate with the Credentials Plugin to securely store passwords.