Not rated

CVE-2019-10366 Jenkins Skytap Cloud CI Plugin 2.06 and earlier stored credentials unencrypted in job config.xml files on the Jenkins…

Description

Jenkins Skytap Cloud CI Plugin 2.06 and earlier stored credentials unencrypted in job config.xml files on the Jenkins master where they could be viewed by users with Extended Read permission, or access to the master file system.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins Skytap Cloud CI Plugin	Versions not published

The 2 CVEs of Jenkins Skytap Cloud CI Plugin →

CVE-2020-2157 Jenkins Skytap Cloud CI Plugin 2.07 and earlier transmits configured credentials in plain text as part of job… Not rated

Do you use Jenkins Skytap Cloud CI Plugin?

Track this CVE Watch Jenkins Skytap Cloud CI Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2019-10366

Timeline

Published July 31, 2019
Last modified August 4, 2024

References

[oss-security] 20190731 Multiple vulnerabilities in Jenkins plugins www.openwall.com
www.zerodayinitiative.com www.zerodayinitiative.com
jenkins.io jenkins.io

Track this CVE

CVE-2019-10366 Jenkins Skytap Cloud CI Plugin 2.06 and earlier stored credentials unencrypted in job config.xml files on the Jenkins…

Description

Affected products and versions

Other CVEs of Jenkins Skytap Cloud CI Plugin