Aller au contenu
Se connecter
Non notée

CVE-2019-10294 Jenkins Kmap Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be…

Description

Jenkins Kmap Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.

Produits et versions touchés

Produit Versions touchées Corrigé en
Jenkins Kmap Plugin Versions non publiées

Autres CVE de Jenkins Kmap Plugin

Les 3 CVE de Jenkins Kmap Plugin →
CVE-2019-10292 A cross-site request forgery vulnerability in Jenkins Kmap Plugin in KmapJenkinsBuilder.DescriptorImpl form validation… Non notée CVE-2019-10293 A missing permission check in Jenkins Kmap Plugin in KmapJenkinsBuilder.DescriptorImpl form validation methods allows… Non notée
Suivre cette CVE