Jenkins youtrack-plugin Plugin 0.7.1 and older stored credentials unencrypted in its global configuration file on the Jenkins master where they could be viewed by users with access to the master file system.
References
Link | Resource |
---|---|
http://www.openwall.com/lists/oss-security/2019/04/12/2 | Mailing List Third Party Advisory |
http://www.securityfocus.com/bid/107790 | Third Party Advisory VDB Entry |
https://jenkins.io/security/advisory/2019-04-03/#SECURITY-963 | Vendor Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: jenkins
Published: 2019-04-04T15:38:50
Updated: 2023-10-24T16:46:40.045Z
Reserved: 2019-03-29T00:00:00
Link: CVE-2019-10287
JSON object: View
NVD Information
Status : Modified
Published: 2019-04-04T16:29:02.807
Modified: 2023-10-25T18:16:13.477
Link: CVE-2019-10287
JSON object: View
Redhat Information
No data.
CWE