[org.jenkins-ci.plugins:git-client] Insecure temporary file usage in Jenkins Git Client Plugin

Jenkins Git Client Plugin 2.4.2 and earlier creates temporary file with insecure permissions resulting in information disclosure

References

• https://nvd.nist.gov/vuln/detail/CVE-2017-1000242
• https://jenkins.io/security/advisory/2017-04-27/
• http://www.securityfocus.com/bid/101940
• https://github.com/jenkinsci/git-client-plugin/commit/75ea3fe05650fc6ca09046a72493e2b3f066fb98
• https://github.com/advisories/GHSA-fcxw-hhxq-48wx