Not rated
CVE-2019-10345 Jenkins Configuration as Code Plugin 1.20 and earlier did not treat the proxy password as a secret to be masked when…
Description
Jenkins Configuration as Code Plugin 1.20 and earlier did not treat the proxy password as a secret to be masked when logging or encrypted for export.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Jenkins Configuration as Code Plugin | Versions not published |
References
- [oss-security] 20190731 Multiple vulnerabilities in Jenkins plugins www.openwall.com
- jenkins.io jenkins.io
Timeline
- Published
- Last modified
Other CVEs of Jenkins Configuration as Code Plugin
The 7 CVEs of Jenkins Configuration as Code Plugin →
CVE-2022-23106
Jenkins Configuration as Code Plugin 1.55 and earlier used a non-constant time comparison function when validating an…
Not rated
CVE-2019-10367
Due to an incomplete fix of CVE-2019-10343, Jenkins Configuration as Code Plugin 1.26 and earlier did not properly apply…
Not rated
CVE-2019-10362
Jenkins Configuration as Code Plugin 1.24 and earlier did not escape values resulting in variable interpolation during…
Not rated
CVE-2019-10344
Missing permission checks in Jenkins Configuration as Code Plugin 1.24 and earlier in various HTTP endpoints allowed…
Not rated