Skip to content
Sign in
Not rated

CVE-2019-10286 Jenkins DeployHub Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can…

Description

Jenkins DeployHub Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.

Affected products and versions

Product Affected versions Fixed in
Jenkins DeployHub Plugin Versions not published

Other CVEs of Jenkins DeployHub Plugin

The 2 CVEs of Jenkins DeployHub Plugin →
CVE-2020-2156 Jenkins DeployHub Plugin 8.0.14 and earlier transmits configured credentials in plain text as part of job… Not rated
Track this CVE