Not rated

CVE-2019-10283 Jenkins mabl Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be…

Description

Jenkins mabl Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins mabl Plugin	Versions not published

The 5 CVEs of Jenkins mabl Plugin →

CVE-2023-37953 A missing permission check in Jenkins mabl Plugin 0.0.46 and earlier allows attackers with Overall/Read permission to… Not rated CVE-2023-37952 A cross-site request forgery (CSRF) vulnerability in Jenkins mabl Plugin 0.0.46 and earlier allows attackers to… Not rated CVE-2023-37951 Jenkins mabl Plugin 0.0.46 and earlier does not set the appropriate context for credentials lookup, allowing attackers… Not rated CVE-2023-37950 A missing permission check in Jenkins mabl Plugin 0.0.46 and earlier allows attackers with Overall/Read permission to… Not rated

Do you use Jenkins mabl Plugin?

Track this CVE Watch Jenkins mabl Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2019-10283

Timeline

Published April 4, 2019
Last modified August 4, 2024

References

107790 www.securityfocus.com
[oss-security] 20190413 Re: Multiple vulnerabilities in Jenkins plugins www.openwall.com
jenkins.io jenkins.io

Track this CVE

CVE-2019-10283 Jenkins mabl Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be…

Description

Affected products and versions

Other CVEs of Jenkins mabl Plugin