Skip to content
Sign in
Not rated

CVE-2019-16542 Jenkins Anchore Container Image Scanner Plugin 1.0.19 and earlier stores credentials unencrypted in job config.xml files…

Description

Jenkins Anchore Container Image Scanner Plugin 1.0.19 and earlier stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.

Affected products and versions

Product Affected versions Fixed in
Jenkins Anchore Container Image Scanner Plugin Versions not published

Other CVEs of Jenkins Anchore Container Image Scanner Plugin

The 2 CVEs of Jenkins Anchore Container Image Scanner Plugin →
CVE-2022-41225 Jenkins Anchore Container Image Scanner Plugin 1.0.24 and earlier does not escape content provided by the Anchore engine… 5.4 Medium
Track this CVE