Not rated

CVE-2019-10452 Jenkins View26 Test-Reporting Plugin stores credentials unencrypted in job config.xml files on the Jenkins master…

Description

Jenkins View26 Test-Reporting Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins View26 Test-Reporting Plugin	Versions not published

The 2 CVEs of Jenkins View26 Test-Reporting Plugin →

CVE-2022-41244 Jenkins View26 Test-Reporting Plugin 1.0.7 and earlier does not perform hostname validation when connecting to the… 8.1 High

Do you use Jenkins View26 Test-Reporting Plugin?

Track this CVE Watch Jenkins View26 Test-Reporting Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2019-10452

Timeline

Published October 16, 2019
Last modified August 4, 2024

References

jenkins.io jenkins.io

Track this CVE

CVE-2019-10452 Jenkins View26 Test-Reporting Plugin stores credentials unencrypted in job config.xml files on the Jenkins master…

Description

Affected products and versions

Other CVEs of Jenkins View26 Test-Reporting Plugin