← All advisories

Medium severity5.5NVD Advisory· Published Mar 9, 2020· Updated Jun 17, 2026

CVE-2020-2145

CVE-2020-2145

Description

Jenkins Zephyr Enterprise Test Management Plugin 1.9.1 and earlier stores its Zephyr password in plain text on the Jenkins master file system.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
org.jenkins-ci.plugins:zephyr-enterprise-test-managementMaven	< 1.10	1.10

Affected products

3

Jenkins Project/Zephyr Enterprise Test Management
cpe:2.3:a:jenkins:zephyr_enterprise_test_management:*:*:*:*:*:jenkins:*:*
Range: <=1.9.1
ghsa-coords
pkg:maven/org.jenkins-ci.plugins/zephyr-enterprise-test-management
Range: < 1.10
Jenkins Project/Zephyr Enterprise Test Management Plugincpe-rescue
Range: unspecified

Patches

Vulnerability mechanics

References

5

www.openwall.com/lists/oss-security/2020/03/09/1nvdMailing ListThird Party AdvisoryWEB
github.com/advisories/GHSA-xv58-gp43-6m76ghsaADVISORY
jenkins.io/security/advisory/2020-03-09/nvdVendor AdvisoryWEB
nvd.nist.gov/vuln/detail/CVE-2020-2145ghsaADVISORY
plugins.jenkins.io/zephyr-enterprise-test-managementghsaPACKAGE

News mentions

1

Jenkins Security Advisory 2020-03-09
Jenkins Security Advisories · Mar 9, 2020