CVE-2019-10303
Summary
| CVE | CVE-2019-10303 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2019-04-18 17:29:00 UTC |
|---|
| Updated | 2023-10-25 18:16:00 UTC |
|---|
| Description | Jenkins Azure PublisherSettings Credentials Plugin 1.2 and earlier stored credentials unencrypted in the credentials.xml file on the Jenkins master where they could be viewed by users with access to the master file system. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| Malformed Request |
BID |
www.securityfocus.com |
Third Party Advisory, VDB Entry |
| Jenkins Security Advisory 2019-04-17 |
MISC |
jenkins.io |
Vendor Advisory |
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 995895 Java (Maven) Security Update for org.jenkins-ci.plugins:azure-publishersettings-credentials (GHSA-rfc8-wrrf-wp3w)
