CVE-2020-2133: 
Java vulnerability analysis and mitigation

CVE-2020-2133 (SECURITY-1540) affects the Jenkins Applatix Plugin versions 1.1 and earlier. The vulnerability was discovered by James Holderness of IB Boost and disclosed on February 12, 2020. This security issue impacts the plugin's password handling functionality (Jenkins Advisory).

The vulnerability is classified as Medium severity according to CVSS scoring system. The core issue involves the Applatix Plugin storing passwords in an unencrypted format within job config.xml files on the Jenkins controller (Jenkins Advisory).

The vulnerability exposes Applatix passwords to unauthorized access. Users with Extended Read permission or those who have access to the Jenkins controller file system can view these unencrypted credentials stored in the job config.xml files (Jenkins Advisory).

As of the advisory publication date, no fix was available for this vulnerability. Users should implement strict access controls to both the Jenkins controller file system and carefully manage Extended Read permissions to minimize the risk (Jenkins Advisory).