CVE-2019-10287 - Jenkins youtrack-plugin Plugin 0.7.1 and older stored credentials unencrypted in its global configuration file on the Jenkins master where they could be viewed by users with access to the master file system

Back Back to CVE browser

HIGH

Jenkins youtrack-plugin Plugin 0.7.1 and older stored credentials unencrypted in its global configuration file on the Jenkins master where they could be viewed by users with access to the master file system

Published Apr 4, 2019

8.8

HIGH

CVSS 3.1

EPSS 1.80%

Description

Jenkins youtrack-plugin Plugin 0.7.1 and older stored credentials unencrypted in its global configuration file on the Jenkins master where they could be viewed by users with access to the master file system.

Affected products

Vendor Jenkins project Product Jenkins youtrack-plugin Plugin Default
unknown
Affected
- 0.7.1 and older

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Jenkins project	Jenkins youtrack-plugin Plugin	unknown	Affected 0.7.1 and older

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-522

Insufficiently Protected Credentials

References (6)

http://www.openwall.com/lists/oss-security/2019/04/12/2
mailing-listx_refsource_MLISTMailing ListThird Party Advisory
http://www.securityfocus.com/bid/107790
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-3529
Advisory
https://github.com/advisories/GHSA-c7p6-x2p3-3wph
Advisory
https://jenkins.io/security/advisory/2019-04-03/#SECURITY-963
x_refsource_CONFIRMVendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-10287

Link	Providers	Tags
http://www.openwall.com/lists/oss-security/2019/04/12/2		mailing-listx_refsource_MLISTMailing ListThird Party Advisory
http://www.securityfocus.com/bid/107790		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-3529		Advisory
https://github.com/advisories/GHSA-c7p6-x2p3-3wph		Advisory
https://jenkins.io/security/advisory/2019-04-03/#SECURITY-963		x_refsource_CONFIRMVendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-10287