High

DATE	CVE	VULNERABILITY TITLE	RISK
2019-01-09	CVE-2018-1000423	Insufficiently Protected Credentials vulnerability in Atlassian Crowd2 An insufficiently protected credentials vulnerability exists in Jenkins Crowd 2 Integration Plugin 2.0.0 and earlier in CrowdSecurityRealm.java, CrowdConfigurationService.java that allows attackers with local file system access to obtain the credentials used to connect to Crowd 2. local low complexity atlassian CWE-522	7.8