Not rated

CVE-2019-10378 Jenkins TestLink Plugin 3.16 and earlier stores credentials unencrypted in its global configuration file on the…

Description

Jenkins TestLink Plugin 3.16 and earlier stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins TestLink Plugin	Versions not published

Do you use Jenkins TestLink Plugin?

Track this CVE Watch Jenkins TestLink Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2019-10378

Timeline

Published August 7, 2019
Last modified August 4, 2024

References

[oss-security] 20190807 Multiple vulnerabilities in Jenkins plugins www.openwall.com
www.zerodayinitiative.com www.zerodayinitiative.com
jenkins.io jenkins.io

Track this CVE