CVE-2019-16545 - Jenkins QMetry for JIRA - Test Management Plugin transmits credentials in its configuration in plain text as part of job configuration forms, potentially resulting in their exposure

Back Back to CVE browser

MEDIUM

Jenkins QMetry for JIRA - Test Management Plugin transmits credentials in its configuration in plain text as part of job configuration forms, potentially resulting in their exposure

Published Nov 21, 2019

6.5

MEDIUM

CVSS 3.1

EPSS 0.54%

Description

Jenkins QMetry for JIRA - Test Management Plugin transmits credentials in its configuration in plain text as part of job configuration forms, potentially resulting in their exposure.

Affected products

Vendor Jenkins project Product Jenkins QMetry for JIRA - Test Management Plugin Default
n/a
- Version
  1.13 and earlier
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Jenkins project

Jenkins QMetry for JIRA - Test Management Plugin

n/a

Version	Status	Constraints
1.13 and earlier	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-319

References (6)

http://www.openwall.com/lists/oss-security/2019/11/21/1
mailing-listx_refsource_MLISTMailing ListThird Party Advisory
https://github.com/advisories/GHSA-793w-q2h5-8h5j
Advisory
https://github.com/jenkinsci/qmetry-for-jira-test-management-plugin/commit/6711f566b72c099f10b1cecab406786ca998651d
https://jenkins.io/security/advisory/2019-11-21/#SECURITY-727%20%282%29
x_refsource_CONFIRM
https://jenkins.io/security/advisory/2019-11-21/#SECURITY-727%20(2)
https://nvd.nist.gov/vuln/detail/CVE-2019-16545

Link	Providers	Tags
http://www.openwall.com/lists/oss-security/2019/11/21/1		mailing-listx_refsource_MLISTMailing ListThird Party Advisory
https://github.com/advisories/GHSA-793w-q2h5-8h5j		Advisory
https://github.com/jenkinsci/qmetry-for-jira-test-management-plugin/commit/6711f566b72c099f10b1cecab406786ca998651d
https://jenkins.io/security/advisory/2019-11-21/#SECURITY-727%20%282%29		x_refsource_CONFIRM
https://jenkins.io/security/advisory/2019-11-21/#SECURITY-727%20(2)
https://nvd.nist.gov/vuln/detail/CVE-2019-16545

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner jenkins

Published Nov 21, 2019

Updated Aug 5, 2024

Reserved Sep 20, 2019

Link CVE-2019-16545

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-16545

Red Hat

Severity n/a

Public date n/a

Links CVE-2019-16545

GHSA-793W-Q2H5-8H5J