Jenkins Assembla Auth Plugin stores credentials unencrypted in the global config.xml configuration file on the Jenkins master where they can be viewed by users with access to the master file system.
References
Link | Resource |
---|---|
http://www.openwall.com/lists/oss-security/2019/04/12/2 | Mailing List Third Party Advisory |
http://www.securityfocus.com/bid/107790 | Third Party Advisory VDB Entry |
https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1093 | Vendor Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: jenkins
Published: 2019-04-04T15:38:49
Updated: 2023-10-24T16:46:31.821Z
Reserved: 2019-03-29T00:00:00
Link: CVE-2019-10280
JSON object: View
NVD Information
Status : Modified
Published: 2019-04-04T16:29:02.523
Modified: 2023-10-25T18:16:13.040
Link: CVE-2019-10280
JSON object: View
Redhat Information
No data.
CWE