[org.jenkins-ci.plugins:fortify] Fortify Plugin stored credentials in plain text

Fortify Plugin 19.1.29 and earlier stored its proxy server password unencrypted in job config.xml files. This password could be read by users with the Extended Read permission.

Fortify Plugin 19.2.30 now encrypts the proxy server password.

References

• https://nvd.nist.gov/vuln/detail/CVE-2020-2107
• https://jenkins.io/security/advisory/2020-01-29/#SECURITY-1565
• http://www.openwall.com/lists/oss-security/2020/01/29/1
• https://github.com/advisories/GHSA-xr37-pjfh-qwwc