Skip to content
Sign in
Not rated

CVE-2019-10416 Jenkins Violation Comments to GitLab Plugin 2.28 and earlier stored credentials unencrypted in job config.xml files on…

Description

Jenkins Violation Comments to GitLab Plugin 2.28 and earlier stored credentials unencrypted in job config.xml files on the Jenkins master where they could be viewed by users with Extended Read permission, or access to the master file system.

Affected products and versions

Product Affected versions Fixed in
Jenkins Violation Comments to GitLab Plugin Versions not published

Other CVEs of Jenkins Violation Comments to GitLab Plugin

The 3 CVEs of Jenkins Violation Comments to GitLab Plugin →
CVE-2026-70444 A missing permission check in Jenkins Violation Comments to GitLab Plugin 2.62.0 and earlier allows attackers with… 4.3 Medium CVE-2019-10415 Jenkins Violation Comments to GitLab Plugin 2.28 and earlier stored credentials unencrypted in its global… Not rated
Track this CVE