Skip to content
Sign in
Not rated

CVE-2019-16544 Jenkins QMetry for JIRA - Test Management Plugin 1.12 and earlier stores credentials unencrypted in job config.xml files…

Description

Jenkins QMetry for JIRA - Test Management Plugin 1.12 and earlier stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.

Affected products and versions

Product Affected versions Fixed in
Jenkins QMetry for JIRA - Test Management Plugin Versions not published

Other CVEs of Jenkins QMetry for JIRA - Test Management Plugin

The 2 CVEs of Jenkins QMetry for JIRA - Test Management Plugin →
CVE-2019-16545 Jenkins QMetry for JIRA - Test Management Plugin transmits credentials in its configuration in plain text as part of job… Not rated
Track this CVE