Not rated

CVE-2019-1003068 Jenkins VMware vRealize Automation Plugin stores credentials unencrypted in job config.xml files on the Jenkins master…

Description

Jenkins VMware vRealize Automation Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins VMware vRealize Automation Plugin	Versions not published

Do you use Jenkins VMware vRealize Automation Plugin?

Track this CVE Watch Jenkins VMware vRealize Automation Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2019-1003068

Timeline

Published April 4, 2019
Last modified August 5, 2024

References

107790 www.securityfocus.com
[oss-security] 20190413 Re: Multiple vulnerabilities in Jenkins plugins www.openwall.com
jenkins.io jenkins.io

Track this CVE