Medium severity4.3NVD Advisory· Published Sep 1, 2020· Updated Jun 17, 2026
CVE-2020-2251
CVE-2020-2251
Description
Jenkins SoapUI Pro Functional Testing Plugin 1.5 and earlier transmits project passwords in its configuration in plain text as part of job configuration forms, potentially resulting in their exposure.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
org.jenkins-ci.plugins:soapui-pro-functional-testingMaven | < 1.6 | 1.6 |
Affected products
5- cpe:2.3:a:jenkins:soapui_pro_functional_testing:*:*:*:*:*:jenkins:*:*Range: <=1.5
- ghsa-coords2 versions
< 1.6+ 1 more
- (no CPE)range: < 1.6
- (no CPE)range: < 2.236.0
- Range: unspecified
Patches
Vulnerability mechanics
References
5- www.openwall.com/lists/oss-security/2020/09/01/3nvdMailing ListThird Party AdvisoryWEB
- github.com/advisories/GHSA-q4qq-8q2r-g2f2ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2020-2251ghsaADVISORY
- jenkins.io/security/advisory/2020-09-01/ghsaWEB
- jenkins.io/security/advisory/2020-09-01/nvd
News mentions
1- Jenkins Security Advisory 2020-09-01Jenkins Security Advisories · Sep 1, 2020