Not rated

CVE-2019-1003025 A exposure of sensitive information vulnerability exists in Jenkins Cloud Foundry Plugin 2.3.1 and earlier in…

Description

A exposure of sensitive information vulnerability exists in Jenkins Cloud Foundry Plugin 2.3.1 and earlier in AbstractCloudFoundryPushDescriptor.java that allows attackers with Overall/Read access to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins Cloud Foundry Plugin	Versions not published

Do you use Jenkins Cloud Foundry Plugin?

Track this CVE Watch Jenkins Cloud Foundry Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2019-1003025

Timeline

Published February 20, 2019
Last modified August 5, 2024

References

jenkins.io jenkins.io
107295 www.securityfocus.com

Track this CVE