Missing password field masking in the Zoom Jenkins Marketplace plugin before version 1.6 may allow an unauthenticated user to conduct a disclosure of information via adjacent network access.
The product does not mask passwords during entry, increasing the potential for attackers to observe and capture passwords.