CVE-2019-10364 - Jenkins Amazon EC2 Plugin 1.43 and earlier wrote the beginning of private keys to the Jenkins system log

Back Back to CVE browser

MEDIUM

Jenkins Amazon EC2 Plugin 1.43 and earlier wrote the beginning of private keys to the Jenkins system log

Published Jul 31, 2019

5.5

MEDIUM

CVSS 3.1

EPSS 0.34%

Description

Jenkins Amazon EC2 Plugin 1.43 and earlier wrote the beginning of private keys to the Jenkins system log.

Affected products

Vendor Jenkins project Product Jenkins Amazon EC2 Plugin Default
n/a
- Version
  1.43 and earlier
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Jenkins project

Jenkins Amazon EC2 Plugin

n/a

Version	Status	Constraints
1.43 and earlier	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-532

References (5)

http://www.openwall.com/lists/oss-security/2019/07/31/1
mailing-listx_refsource_MLISTMailing ListThird Party Advisory
https://github.com/advisories/GHSA-w7fv-7j46-wwrv
Advisory
https://github.com/jenkinsci/ec2-plugin/commit/78c3c49a227ac8eccb8b1be7193d5605363fe251
https://jenkins.io/security/advisory/2019-07-31/#SECURITY-673
x_refsource_CONFIRMVendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-10364

Link	Providers	Tags
http://www.openwall.com/lists/oss-security/2019/07/31/1		mailing-listx_refsource_MLISTMailing ListThird Party Advisory
https://github.com/advisories/GHSA-w7fv-7j46-wwrv		Advisory
https://github.com/jenkinsci/ec2-plugin/commit/78c3c49a227ac8eccb8b1be7193d5605363fe251
https://jenkins.io/security/advisory/2019-07-31/#SECURITY-673		x_refsource_CONFIRMVendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-10364

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner jenkins

Published Jul 31, 2019

Updated Aug 4, 2024

Reserved Mar 29, 2019

Link CVE-2019-10364

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-10364

Red Hat

Severity n/a

Public date n/a

Links CVE-2019-10364

GHSA-W7FV-7J46-WWRV