Skip to content
Sign in
Not rated

CVE-2019-10450 Jenkins ElasticBox CI Plugin stores credentials unencrypted in the global config.xml configuration file on the Jenkins…

Description

Jenkins ElasticBox CI Plugin stores credentials unencrypted in the global config.xml configuration file on the Jenkins master where they can be viewed by users with access to the master file system.

Affected products and versions

Product Affected versions Fixed in
Jenkins ElasticBox CI Plugin Versions not published

Other CVEs of Jenkins ElasticBox CI Plugin

The 3 CVEs of Jenkins ElasticBox CI Plugin →
CVE-2023-37965 A missing permission check in Jenkins ElasticBox CI Plugin 5.0.1 and earlier allows attackers with Overall/Read… Not rated CVE-2023-37964 A cross-site request forgery (CSRF) vulnerability in Jenkins ElasticBox CI Plugin 5.0.1 and earlier allows attackers… Not rated
Track this CVE