CVE-2019-10427 - Jenkins Aqua MicroScanner Plugin 1.0.7 and earlier transmitted configured credentials in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure

Back Back to CVE browser

MEDIUM

Jenkins Aqua MicroScanner Plugin 1.0.7 and earlier transmitted configured credentials in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure

Published Sep 25, 2019

5.3

MEDIUM

CVSS 3.1

EPSS 0.77%

Description

Jenkins Aqua MicroScanner Plugin 1.0.7 and earlier transmitted configured credentials in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure.

Affected products

Vendor Jenkins project Product Jenkins Aqua MicroScanner Plugin Default
n/a
- Version
  1.0.7 and earlier
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Jenkins project

Jenkins Aqua MicroScanner Plugin

n/a

Version	Status	Constraints
1.0.7 and earlier	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-319

References (5)

http://www.openwall.com/lists/oss-security/2019/09/25/3
mailing-listx_refsource_MLISTMailing ListThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-5429
Advisory
https://github.com/advisories/GHSA-vv4q-2w98-4v8g
Advisory
https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1507
x_refsource_CONFIRMVendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-10427

Link	Providers	Tags
http://www.openwall.com/lists/oss-security/2019/09/25/3		mailing-listx_refsource_MLISTMailing ListThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-5429		Advisory
https://github.com/advisories/GHSA-vv4q-2w98-4v8g		Advisory
https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1507		x_refsource_CONFIRMVendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-10427