CVE-2020-2129: 
Java vulnerability analysis and mitigation

CVE-2020-2129 affects the Eagle Tester Plugin version 1.0.9 and earlier in Jenkins. The vulnerability was disclosed on February 12, 2020, and is identified as SECURITY-1552. This security issue has been assigned a Low severity rating according to CVSS scoring system (Jenkins Advisory).

The vulnerability involves the storage of passwords in plaintext within the plugin's global configuration file 'com.bmc.rpd.jenkins.plugin.bmcrpd.configuration.RPDPluginConfiguration.xml' on the Jenkins controller (Jenkins Advisory).

The exposed credentials can be viewed by users who have access to the Jenkins controller file system, potentially leading to unauthorized access to sensitive information (Jenkins Advisory).

The vulnerability can be exploited by any user with access to the Jenkins controller file system, allowing them to view the unencrypted password stored in the global configuration file (Jenkins Advisory).

As of the advisory publication date, no fix was available for this vulnerability. Users should carefully restrict access to the Jenkins controller file system and monitor for any unauthorized access (Jenkins Advisory).