CWE-311 Missing Encryption of Sensitive Data

Jenkins does not encrypt secrets from POST config.xml submissions before storing them in job configurations

AWS CDK CodeBuild S3 Log Encryption Boolean Inversion

CoreWCF: SPNEGO SecurityContextToken proof key wrapped without confidentiality

guzzlehttp/guzzle: Silent HTTPS-Proxy Downgrade to Cleartext

Apache Tomcat Missing Encryption of Sensitive Data vulnerability

Antrea has Missing Encryption of Sensitive Data

Nginx-UI Vulnerable to Unauthenticated Backup Download with Encryption Key Disclosure

Rancher's weave CNI password is not configured when a cluster is created from an RKE template

Mattermost Server SAML implementation does not require encryption or signature verification as default

Jenkins Curseforge Publisher Plugin does not mask API Keys displayed on the job configuration form

Jenkins Curseforge Publisher Plugin stores API Keys unencrypted in job config.xml files

Jenkins ByteGuard Build Actions Plugin does not mask API tokens displayed on the job configuration form

Jenkins ByteGuard Build Actions Plugin stores API tokens unencrypted in job config.xml files

Jenkins OpenShift Pipeline Plugin stores authorization tokens unencrypted in job config.xml files

Jenkins User1st uTester Plugin vulnerability exposes unencrypted token to authenticated users

Jenkins Xooa Plugin vulnerability exposes unencrypted tokens to authenticated users

Jenkins Sensedia API Platform Plugin vulnerability exposes unencrypted tokens in its global configuration file

Jenkins VAddy Plugin vulnerability exposes unencrypted keys to certain authenticated users

Jenkins IBM Cloud DevOps Plugin vulnerability exposes SonarQube authentication tokens

Jenkins Dead Man's Snitch Plugin vulnerability stores tokens in plain text

Jenkins QMetry Test Management Plugin stores unencrypted API keys

Jenkins Aqua Security Scanner Plugin vulnerability exposes scanner tokens

DragonFly's tiny file download uses hard coded HTTP protocol

chromedriver Downloads Resources over HTTP

Elasticsearch stores private key on disk unencrypted