From 1918310ade1ab1097646c11da7530d328c35f7ea Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Wed, 27 Jul 2022 21:22:57 +0000
Subject: [PATCH] Publish GHSA-9h79-5m2f-mqj2

---
 .../GHSA-9h79-5m2f-mqj2.json                  | 29 +++++++++++++++++--
 1 file changed, 26 insertions(+), 3 deletions(-)
 rename advisories/{unreviewed => github-reviewed}/2022/06/GHSA-9h79-5m2f-mqj2/GHSA-9h79-5m2f-mqj2.json (56%)

diff --git a/advisories/unreviewed/2022/06/GHSA-9h79-5m2f-mqj2/GHSA-9h79-5m2f-mqj2.json b/advisories/github-reviewed/2022/06/GHSA-9h79-5m2f-mqj2/GHSA-9h79-5m2f-mqj2.json
similarity index 56%
rename from advisories/unreviewed/2022/06/GHSA-9h79-5m2f-mqj2/GHSA-9h79-5m2f-mqj2.json
rename to advisories/github-reviewed/2022/06/GHSA-9h79-5m2f-mqj2/GHSA-9h79-5m2f-mqj2.json
index 849e592751c..ecca7323d25 100644
--- a/advisories/unreviewed/2022/06/GHSA-9h79-5m2f-mqj2/GHSA-9h79-5m2f-mqj2.json
+++ b/advisories/github-reviewed/2022/06/GHSA-9h79-5m2f-mqj2/GHSA-9h79-5m2f-mqj2.json
@@ -1,11 +1,12 @@
 {
   "schema_version": "1.2.0",
   "id": "GHSA-9h79-5m2f-mqj2",
-  "modified": "2022-07-01T00:01:15Z",
+  "modified": "2022-07-27T21:14:56Z",
   "published": "2022-06-24T00:00:32Z",
   "aliases": [
     "CVE-2022-34213"
   ],
+  "summary": "Squash TM Publisher (Squash4Jenkins) Plugin stores passwords stored in plain text",
   "details": "Jenkins Squash TM Publisher (Squash4Jenkins) Plugin 1.0.0 and earlier stores passwords unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system.",
   "severity": [
     {
@@ -14,7 +15,25 @@
     }
   ],
   "affected": [
-
+    {
+      "package": {
+        "ecosystem": "Maven",
+        "name": "org.jenkins-ci.plugins:squashtm-publisher"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            }
+          ]
+        }
+      ],
+      "database_specific": {
+        "last_known_affected_version_range": "<= 1.0.0"
+      }
+    }
   ],
   "references": [
     {
@@ -24,6 +43,10 @@
     {
       "type": "WEB",
       "url": "https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2089"
+    },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/jenkinsci/squashtm-publisher-plugin"
     }
   ],
   "database_specific": {
@@ -31,6 +54,6 @@
       "CWE-522"
     ],
     "severity": "MODERATE",
-    "github_reviewed": false
+    "github_reviewed": true
   }
 }
\ No newline at end of file