diff --git a/advisories/unreviewed/2022/06/GHSA-9h79-5m2f-mqj2/GHSA-9h79-5m2f-mqj2.json b/advisories/github-reviewed/2022/06/GHSA-9h79-5m2f-mqj2/GHSA-9h79-5m2f-mqj2.json similarity index 56% rename from advisories/unreviewed/2022/06/GHSA-9h79-5m2f-mqj2/GHSA-9h79-5m2f-mqj2.json rename to advisories/github-reviewed/2022/06/GHSA-9h79-5m2f-mqj2/GHSA-9h79-5m2f-mqj2.json index 849e592751c..ecca7323d25 100644 --- a/advisories/unreviewed/2022/06/GHSA-9h79-5m2f-mqj2/GHSA-9h79-5m2f-mqj2.json +++ b/advisories/github-reviewed/2022/06/GHSA-9h79-5m2f-mqj2/GHSA-9h79-5m2f-mqj2.json @@ -1,11 +1,12 @@ { "schema_version": "1.2.0", "id": "GHSA-9h79-5m2f-mqj2", - "modified": "2022-07-01T00:01:15Z", + "modified": "2022-07-27T21:14:56Z", "published": "2022-06-24T00:00:32Z", "aliases": [ "CVE-2022-34213" ], + "summary": "Squash TM Publisher (Squash4Jenkins) Plugin stores passwords stored in plain text", "details": "Jenkins Squash TM Publisher (Squash4Jenkins) Plugin 1.0.0 and earlier stores passwords unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system.", "severity": [ { @@ -14,7 +15,25 @@ } ], "affected": [ - + { + "package": { + "ecosystem": "Maven", + "name": "org.jenkins-ci.plugins:squashtm-publisher" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + } + ] + } + ], + "database_specific": { + "last_known_affected_version_range": "<= 1.0.0" + } + } ], "references": [ { @@ -24,6 +43,10 @@ { "type": "WEB", "url": "https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2089" + }, + { + "type": "PACKAGE", + "url": "https://github.com/jenkinsci/squashtm-publisher-plugin" } ], "database_specific": { @@ -31,6 +54,6 @@ "CWE-522" ], "severity": "MODERATE", - "github_reviewed": false + "github_reviewed": true } } \ No newline at end of file