Ecosystem	Package	Version

Vulnerabilities

CVE-2020-2095

CVE-2020-2095

Jenkins Redgate SQL Change Automation Plugin 2.0.4 and earlier stored an API key unencrypted in job config.xml files on the Jenkins master where they could be viewed by users with Extended Read permission, or access to the master file system.

Published Feb 4, 2026

https://www.jenkins.io/security/advisory/2020-01-15/https://github.com/advisories/GHSA-x23m-8c2h-6wg7

CVSS ScoreMedium

4.3

Ecosystem	Package	Version


maven	com.redgate.plugins.redgatesqlci/redgate-sql-ci	1.0.10
maven	com.redgate.plugins.redgatesqlci/redgate-sql-ci	1.0.11
maven	com.redgate.plugins.redgatesqlci/redgate-sql-ci	1.0.12
maven	com.redgate.plugins.redgatesqlci/redgate-sql-ci	1.0.13
maven	com.redgate.plugins.redgatesqlci/redgate-sql-ci	1.0.14
maven	com.redgate.plugins.redgatesqlci/redgate-sql-ci	1.0.16
maven	com.redgate.plugins.redgatesqlci/redgate-sql-ci	1.0.1
maven	com.redgate.plugins.redgatesqlci/redgate-sql-ci	1.0.3
maven	com.redgate.plugins.redgatesqlci/redgate-sql-ci	1.0.5
maven	com.redgate.plugins.redgatesqlci/redgate-sql-ci	1.0.6
maven	com.redgate.plugins.redgatesqlci/redgate-sql-ci	1.0.7
maven	com.redgate.plugins.redgatesqlci/redgate-sql-ci	1.0.8
maven	com.redgate.plugins.redgatesqlci/redgate-sql-ci	2.0.0
maven	com.redgate.plugins.redgatesqlci/redgate-sql-ci	2.0.1
maven	com.redgate.plugins.redgatesqlci/redgate-sql-ci	2.0.2
maven	com.redgate.plugins.redgatesqlci/redgate-sql-ci	2.0.3
maven	com.redgate.plugins.redgatesqlci/redgate-sql-ci	2.0.4

CVE-2020-2095 | Components Impacted | Sonatype Guide | Sonatype Guide