CVE-2019-10415: Jenkins project Jenkins Violation Comments to GitLab

Няма оценка

CVSS

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

Описание

Оригинално описание

Jenkins Violation Comments to GitLab Plugin 2.28 and earlier stored credentials unencrypted in its global configuration file on the Jenkins master where they could be viewed by users with access to the master file system.

Засегнати продукти

Jenkins project Jenkins Violation Comments to GitLab Plugin: 2.28 and earlier

История

25 септември 2019 Публикувано

Други уязвимости в Jenkins project Jenkins Violation Comments to GitLab Plugin

4.3CVE-2026-70444
CVE-2019-10416

Първоизточници

https://www.cve.org/CVERecord?id=CVE-2019-10415
https://nvd.nist.gov/vuln/detail/CVE-2019-10415
https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1577
http://www.openwall.com/lists/oss-security/2019/09/25/3