CVE-2020-2126

Name of the Vulnerable Software and Affected Versions Jenkins DigitalOcean Plugin version 1.1 and earlier

Description The issue concerns the storage of a token in an unencrypted form within the global config.xml file on the Jenkins master. This token can be accessed by users who have permission to view the master file system.

Recommendations For Jenkins DigitalOcean Plugin version 1.1 and earlier, consider restricting access to the global config.xml file to minimize the risk of token exposure until a patch is available.