deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2[PII_REDACTED]
Published: 2019-04-04
Description: Jenkins Official OWASP ZAP Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-311
References: http://www.openwall.com/lists/oss-security/2019/04/12/2; http://www.securityfocus.com/bid/107790; https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1041
CVE: CVE-2[PII_REDACTED]
Published: 2019-04-04
Description: Jenkins jenkins-cloudformation-plugin Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-311
References: http://www.openwall.com/lists/oss-security/2019/04/12/2; http://www.securityfocus.com/bid/107790; https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1042
CVE: CVE-2[PII_REDACTED]
Published: 2019-04-04
Description: Jenkins AWS CloudWatch Logs Publisher Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-311
References: http://www.openwall.com/lists/oss-security/2019/04/12/2; http://www.securityfocus.com/bid/107790; https://jenkins.io/security/advisory/2019-04-03/#SECURITY-830
CVE: CVE-2[PII_REDACTED]
Published: 2019-04-04
Description: Jenkins Amazon SNS Build Notifier Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-311
References: http://www.openwall.com/lists/oss-security/2019/04/12/2; http://www.securityfocus.com/bid/107790; https://jenkins.io/security/advisory/2019-04-03/#SECURITY-832
CVE: CVE-2[PII_REDACTED]
Published: 2019-04-04
Description: Jenkins aws-device-farm Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-311
References: http://www.openwall.com/lists/oss-security/2019/04/12/2; http://www.securityfocus.com/bid/107790; https://jenkins.io/security/advisory/2019-04-03/#SECURITY-835
CVE: CVE-2[PII_REDACTED]
Published: 2019-04-04
Description: Jenkins CloudShare Docker-Machine Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-311
References: http://www.openwall.com/lists/oss-security/2019/04/12/2; http://www.securityfocus.com/bid/107790; https://jenkins.io/security/advisory/2019-04-03/#SECURITY-838
CVE: CVE-2[PII_REDACTED]
Published: 2019-04-04
Description: Jenkins Bugzilla Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-311
References: http://www.openwall.com/lists/oss-security/2019/04/12/2; http://www.securityfocus.com/bid/107790; https://jenkins.io/security/advisory/2019-04-03/#SECURITY-841
CVE: CVE-2[PII_REDACTED]
Published: 2019-04-04
Description: Jenkins Trac Publisher Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-311
References: http://www.openwall.com/lists/oss-security/2019/04/12/2; http://www.securityfocus.com/bid/107790; https://jenkins.io/security/advisory/2019-04-03/#SECURITY-842
CVE: CVE-2[PII_REDACTED]
Published: 2019-04-04
Description: Jenkins VMware vRealize Automation Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-311
References: http://www.openwall.com/lists/oss-security/2019/04/12/2; http://www.securityfocus.com/bid/107790; https://jenkins.io/security/advisory/2019-04-03/#SECURITY-945
CVE: CVE-2[PII_REDACTED]
Published: 2019-04-04
Description: Jenkins Aqua Security Scanner Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-311
References: http://www.openwall.com/lists/oss-security/2019/04/12/2; http://www.securityfocus.com/bid/107790; https://jenkins.io/security/advisory/2019-04-03/#SECURITY-949
CVE: CVE-2[PII_REDACTED]
Published: 2019-04-04
Description: Jenkins veracode-scanner Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-311
References: http://www.openwall.com/lists/oss-security/2019/04/12/2; http://www.securityfocus.com/bid/107790; https://jenkins.io/security/advisory/2019-04-03/#SECURITY-952
CVE: CVE-2[PII_REDACTED]
Published: 2019-04-04
Description: Jenkins OctopusDeploy Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-311
References: http://www.openwall.com/lists/oss-security/2019/04/12/2; http://www.securityfocus.com/bid/107790; https://jenkins.io/security/advisory/2019-04-03/#SECURITY-957
CVE: CVE-2[PII_REDACTED]
Published: 2019-04-04
Description: Jenkins WildFly Deployer Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-311
References: http://www.openwall.com/lists/oss-security/2019/04/12/2; http://www.securityfocus.com/bid/107790; https://jenkins.io/security/advisory/2019-04-03/#SECURITY-961
CVE: CVE-2[PII_REDACTED]
Published: 2019-04-04
Description: Jenkins VS Team Services Continuous Deployment Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-311
References: http://www.openwall.com/lists/oss-security/2019/04/12/2; http://www.securityfocus.com/bid/107790; https://jenkins.io/security/advisory/2019-04-03/#SECURITY-962
CVE: CVE-2[PII_REDACTED]
Published: 2019-04-04
Description: Jenkins Hyper.sh Commons Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-311
References: http://www.openwall.com/lists/oss-security/2019/04/12/2; http://www.securityfocus.com/bid/107790; https://jenkins.io/security/advisory/2019-04-03/#SECURITY-964
CVE: CVE-2[PII_REDACTED]
Published: 2019-04-04
Description: Jenkins Audit to Database Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-311
References: http://www.openwall.com/lists/oss-security/2019/04/12/2; http://www.securityfocus.com/bid/107790; https://jenkins.io/security/advisory/2019-04-03/#SECURITY-966
CVE: CVE-2[PII_REDACTED]
Published: 2019-04-04
Description: A cross-site request forgery vulnerability in Jenkins Audit to Database Plugin in the DbAuditPublisherDescriptorImpl#doTestJdbcConnection form validation method allows attackers to initiate a connection to an attacker-specified server.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: http://www.openwall.com/lists/oss-security/2019/04/12/2; http://www.securityfocus.com/bid/107790; https://jenkins.io/security/advisory/2019-04-03/#SECURITY-977
CVE: CVE-2[PII_REDACTED]
Published: 2019-04-04
Description: A missing permission check in Jenkins Audit to Database Plugin in the DbAuditPublisherDescriptorImpl#doTestJdbcConnection form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: http://www.openwall.com/lists/oss-security/2019/04/12/2; http://www.securityfocus.com/bid/107790; https://jenkins.io/security/advisory/2019-04-03/#SECURITY-977
CVE: CVE-2[PII_REDACTED]
Published: 2019-04-04
Description: A cross-site request forgery vulnerability in Jenkins VMware Lab Manager Slaves Plugin in the LabManager.DescriptorImpl#doTestConnection form validation method allows attackers to initiate a connection to an attacker-specified server.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: http://www.securityfocus.com/bid/107790; https://jenkins.io/security/advisory/2019-04-03/#SECURITY-979; http://www.securityfocus.com/bid/107790
CVE: CVE-2[PII_REDACTED]
Published: 2019-04-04
Description: A missing permission check in Jenkins VMware Lab Manager Slaves Plugin in the LabManager.DescriptorImpl#doTestConnection form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: http://www.openwall.com/lists/oss-security/2019/04/12/2; http://www.securityfocus.com/bid/107790; https://jenkins.io/security/advisory/2019-04-03/#SECURITY-979
CVE: CVE-2[PII_REDACTED]
Published: 2019-04-04
Description: A cross-site request forgery vulnerability in Jenkins OpenShift Deployer Plugin in the DeployApplication.DeployApplicationDescriptor#doCheckLogin form validation method allows attackers to initiate a connection to an attacker-specified server.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: http://www.openwall.com/lists/oss-security/2019/04/12/2; http://www.securityfocus.com/bid/107790; https://jenkins.io/security/advisory/2019-04-03/#SECURITY-981
CVE: CVE-2[PII_REDACTED]
Published: 2019-04-04
Description: A missing permission check in Jenkins OpenShift Deployer Plugin in the DeployApplication.DeployApplicationDescriptor#doCheckLogin form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: http://www.openwall.com/lists/oss-security/2019/04/12/2; http://www.securityfocus.com/bid/107790; https://jenkins.io/security/advisory/2019-04-03/#SECURITY-981
CVE: CVE-2[PII_REDACTED]
Published: 2019-04-04
Description: A cross-site request forgery vulnerability in Jenkins Gearman Plugin in the GearmanPluginConfig#doTestConnection form validation method allows attackers to initiate a connection to an attacker-specified server.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: http://www.openwall.com/lists/oss-security/2019/04/12/2; http://www.securityfocus.com/bid/107790; https://jenkins.io/security/advisory/2019-04-03/#SECURITY-991
CVE: CVE-2[PII_REDACTED]
Published: 2019-04-04
Description: A missing permission check in Jenkins Gearman Plugin in the GearmanPluginConfig#doTestConnection form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: http://www.openwall.com/lists/oss-security/2019/04/12/2; http://www.securityfocus.com/bid/107790; https://jenkins.io/security/advisory/2019-04-03/#SECURITY-991
CVE: CVE-2[PII_REDACTED]
Published: 2019-04-04
Description: A cross-site request forgery vulnerability in Jenkins Zephyr Enterprise Test Management Plugin in the ZeeDescriptor#doTestConnection form validation method allows attackers to initiate a connection to an attacker-specified server.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: http://www.openwall.com/lists/oss-security/2019/04/12/2; http://www.securityfocus.com/bid/107790; https://jenkins.io/security/advisory/2019-04-03/#SECURITY-993
CVE: CVE-2[PII_REDACTED]
Published: 2019-04-04
Description: A missing permission check in Jenkins Zephyr Enterprise Test Management Plugin in the ZeeDescriptor#doTestConnection form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: http://www.openwall.com/lists/oss-security/2019/04/12/2; http://www.securityfocus.com/bid/107790; https://jenkins.io/security/advisory/2019-04-03/#SECURITY-993
CVE: CVE-2[PII_REDACTED]
Published: 2019-04-04
Description: A cross-site request forgery vulnerability in Jenkins Chef Sinatra Plugin in the ChefBuilderConfiguration.DescriptorImpl#doTestConnection form validation method allows attackers to initiate a connection to an attacker-specified server.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: http://www.openwall.com/lists/oss-security/2019/04/12/2; http://www.securityfocus.com/bid/107790; https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1037
CVE: CVE-2[PII_REDACTED]
Published: 2019-04-04
Description: A missing permission check in Jenkins Chef Sinatra Plugin in the ChefBuilderConfiguration.DescriptorImpl#doTestConnection form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: http://www.openwall.com/lists/oss-security/2019/04/12/2; http://www.securityfocus.com/bid/107790; https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1037
CVE: CVE-2[PII_REDACTED]
Published: 2019-04-04
Description: Jenkins Fabric Beta Publisher Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-311
References: http://www.openwall.com/lists/oss-security/2019/04/12/2; http://www.securityfocus.com/bid/107790; https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1043
CVE: CVE-2[PII_REDACTED]
Published: 2019-04-04
Description: Jenkins Upload to pgyer Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-311
References: http://www.openwall.com/lists/oss-security/2019/04/12/2; http://www.securityfocus.com/bid/107790; https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1044
CVE: CVE-2[PII_REDACTED]
Published: 2019-04-04
Description: A cross-site request forgery vulnerability in Jenkins SOASTA CloudTest Plugin in the CloudTestServer.DescriptorImpl#doValidate form validation method allows attackers to initiate a connection to an attacker-specified server.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: http://www.openwall.com/lists/oss-security/2019/04/12/2; http://www.securityfocus.com/bid/107790; https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1054
CVE: CVE-2[PII_REDACTED]
Published: 2019-04-04
Description: A missing permission check in Jenkins SOASTA CloudTest Plugin in the CloudTestServer.DescriptorImpl#doValidate form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: http://www.openwall.com/lists/oss-security/2019/04/12/2; http://www.securityfocus.com/bid/107790; https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1054
CVE: CVE-2[PII_REDACTED]
Published: 2019-04-04
Description: A cross-site request forgery vulnerability in Jenkins Nomad Plugin in the NomadCloud.DescriptorImpl#doTestConnection form validation method allows attackers to initiate a connection to an attacker-specified server.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: http://www.openwall.com/lists/oss-security/2019/04/12/2; http://www.securityfocus.com/bid/107790; https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1058
CVE: CVE-2[PII_REDACTED]
Published: 2019-04-04
Description: A missing permission check in Jenkins Nomad Plugin in the NomadCloud.DescriptorImpl#doTestConnection form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: http://www.openwall.com/lists/oss-security/2019/04/12/2; http://www.securityfocus.com/bid/107790; https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1058
CVE: CVE-2[PII_REDACTED]
Published: 2019-04-04
Description: Jenkins Open STF Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-311
References: http://www.openwall.com/lists/oss-security/2019/04/12/2; http://www.securityfocus.com/bid/107790; https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1059
CVE: CVE-2[PII_REDACTED]
Published: 2019-04-04
Description: Jenkins Perfecto Mobile Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-311
References: http://www.openwall.com/lists/oss-security/2019/04/12/2; http://www.securityfocus.com/bid/107790; https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1061
CVE: CVE-2[PII_REDACTED]
Published: 2019-04-04
Description: Jenkins TestFairy Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-522
References: http://www.openwall.com/lists/oss-security/2019/04/12/2; http://www.securityfocus.com/bid/107790; https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1062
CVE: CVE-2[PII_REDACTED]
Published: 2019-04-04
Description: Jenkins Crowd Integration Plugin stores credentials unencrypted in the global config.xml configuration file on the Jenkins master where they can be viewed by users with access to the master file system.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-522
References: http://www.openwall.com/lists/oss-security/2019/04/12/2; http://www.securityfocus.com/bid/107790; https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1069
CVE: CVE-2[PII_REDACTED]
Published: 2019-04-04
Description: A cross-site request forgery vulnerability in Jenkins openid Plugin in the OpenIdSsoSecurityRealm.DescriptorImpl#doValidate form validation method allows attackers to initiate a connection to an attacker-specified server.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: http://www.openwall.com/lists/oss-security/2019/04/12/2; http://www.securityfocus.com/bid/107790; https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1084
CVE: CVE-2[PII_REDACTED]
Published: 2019-04-04
Description: A missing permission check in Jenkins openid Plugin in the OpenIdSsoSecurityRealm.DescriptorImpl#doValidate form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: http://www.openwall.com/lists/oss-security/2019/04/12/2; http://www.securityfocus.com/bid/107790; https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1084
CVE: CVE-2019-10273
Published: 2019-04-04
Description: Information leakage vulnerability in the /mc login page in ManageEngine ServiceDesk Plus 9.3 software allows authenticated users to enumerate active users. Due to a flaw within the way the authentication is handled, an attacker is able to login and verify any active account.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-287
References: http://packetstormsecurity.com/files/152439/ManageEngine-ServiceDesk-Plus-9.3-User-Enumeration.html; https://0x445.github.io/CVE-2019-10273/; https://www.exploit-db.com/exploits/46674/
CVE: CVE-2019-10277
Published: 2019-04-04
Description: Jenkins StarTeam Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-522
References: http://www.openwall.com/lists/oss-security/2019/04/12/2; http://www.securityfocus.com/bid/107790; https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1085
CVE: CVE-2019-10278
Published: 2019-04-04
Description: A cross-site request forgery vulnerability in Jenkins jenkins-reviewbot Plugin in the ReviewboardDescriptor#doTestConnection form validation method allows attackers to initiate a connection to an attacker-specified server.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: http://www.openwall.com/lists/oss-security/2019/04/12/2; http://www.securityfocus.com/bid/107790; https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1091
CVE: CVE-2019-10279
Published: 2019-04-04
Description: A missing permission check in Jenkins jenkins-reviewbot Plugin in the ReviewboardDescriptor#doTestConnection form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: http://www.openwall.com/lists/oss-security/2019/04/12/2; http://www.securityfocus.com/bid/107790; https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1091
CVE: CVE-2019-10280
Published: 2019-04-04
Description: Jenkins Assembla Auth Plugin stores credentials unencrypted in the global config.xml configuration file on the Jenkins master where they can be viewed by users with access to the master file system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-522
References: http://www.openwall.com/lists/oss-security/2019/04/12/2; http://www.securityfocus.com/bid/107790; https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1093
CVE: CVE-2019-10281
Published: 2019-04-04
Description: Jenkins Relution Enterprise Appstore Publisher Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-522
References: http://www.openwall.com/lists/oss-security/2019/04/12/2; http://www.securityfocus.com/bid/107790; https://jenkins.io/security/advisory/2019-04-03/#SECURITY-828
CVE: CVE-2019-10282
Published: 2019-04-04
Description: Jenkins Klaros-Testmanagement Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-522
References: http://www.openwall.com/lists/oss-security/2019/04/12/2; http://www.securityfocus.com/bid/107790; https://jenkins.io/security/advisory/2019-04-03/#SECURITY-843
CVE: CVE-2019-10283
Published: 2019-04-04
Description: Jenkins mabl Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-522
References: http://www.openwall.com/lists/oss-security/2019/04/12/2; http://www.securityfocus.com/bid/107790; https://jenkins.io/security/advisory/2019-04-03/#SECURITY-946
CVE: CVE-2019-10284
Published: 2019-04-04
Description: Jenkins Diawi Upload Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-522
References: http://www.openwall.com/lists/oss-security/2019/04/12/2; http://www.securityfocus.com/bid/107790; https://jenkins.io/security/advisory/2019-04-03/#SECURITY-947
CVE: CVE-2019-10285
Published: 2019-04-04
Description: Jenkins Minio Storage Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-522
References: http://www.openwall.com/lists/oss-security/2019/04/12/2; http://www.securityfocus.com/bid/107790; https://jenkins.io/security/advisory/2019-04-03/#SECURITY-955