Skip to content
Not rated

CVE-2019-10277 Jenkins StarTeam Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be…

Description

Jenkins StarTeam Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.

Affected products and versions

Product Affected versions Fixed in
Jenkins StarTeam Plugin Versions not published
Track this CVE