ASA-2019-00607 – Jenkins Sonar Gerrit Plugin: Stored credentials in plain text

Credential unencrypted in job config.xml files on the Jenkins master if the 'Override Credentials' option is used. This credential can be viewed by users with Extended Read permission or access to the master file system.