Not rated
CVE-2019-10366 Jenkins Skytap Cloud CI Plugin 2.06 and earlier stored credentials unencrypted in job config.xml files on the Jenkins…
Description
Jenkins Skytap Cloud CI Plugin 2.06 and earlier stored credentials unencrypted in job config.xml files on the Jenkins master where they could be viewed by users with Extended Read permission, or access to the master file system.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Jenkins Skytap Cloud CI Plugin | Versions not published |
References
- [oss-security] 20190731 Multiple vulnerabilities in Jenkins plugins www.openwall.com
- www.zerodayinitiative.com www.zerodayinitiative.com
- jenkins.io jenkins.io
Timeline
- Published
- Last modified