Not rated
CVE-2019-1003056 Jenkins WebSphere Deployer Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where…
Description
Jenkins WebSphere Deployer Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Jenkins WebSphere Deployer Plugin | Versions not published |
References
- 107790 www.securityfocus.com
- [oss-security] 20190413 Re: Multiple vulnerabilities in Jenkins plugins www.openwall.com
- jenkins.io jenkins.io
Timeline
- Published
- Last modified
Other CVEs of Jenkins WebSphere Deployer Plugin
The 5 CVEs of Jenkins WebSphere Deployer Plugin →
CVE-2020-2108
Jenkins WebSphere Deployer Plugin 1.6.1 and earlier does not configure the XML parser to prevent XXE attacks which can…
Not rated
CVE-2019-16560
A cross-site request forgery vulnerability in Jenkins WebSphere Deployer Plugin 1.6.1 and earlier allows attackers to…
Not rated
CVE-2019-16561
Jenkins WebSphere Deployer Plugin 1.6.1 and earlier allows users with Overall/Read access to disable SSL/TLS certificate…
Not rated
CVE-2019-16559
A missing permission check in Jenkins WebSphere Deployer Plugin 1.6.1 and earlier allows attackers with Overall/Read…
Not rated