CVE-2019-16568 - Jenkins SCTMExecutor Plugin 2.2 and earlier transmits previously configured service credentials in plain text as part of the global configuration, as well as individual jobs' configurations

Back Back to CVE browser

MEDIUM

Jenkins SCTMExecutor Plugin 2.2 and earlier transmits previously configured service credentials in plain text as part of the global configuration, as well as individual jobs' configurations

Published Dec 17, 2019

5.3

MEDIUM

CVSS 3.1

EPSS 0.58%

Description

Jenkins SCTMExecutor Plugin 2.2 and earlier transmits previously configured service credentials in plain text as part of the global configuration, as well as individual jobs' configurations.

Affected products

Vendor Jenkins project Product Jenkins SCTMExecutor Plugin Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <=2.2

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Jenkins project

Jenkins SCTMExecutor Plugin

n/a

Version	Status	Constraints
unspecified	affected	<=2.2

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-319

References (6)

http://www.openwall.com/lists/oss-security/2019/12/17/1
mailing-listx_refsource_MLISTMailing ListThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-5254
Advisory
https://github.com/advisories/GHSA-rxph-cq38-gm3g
Advisory
https://github.com/jenkins-infra/update-center2/pull/324
https://jenkins.io/security/advisory/2019-12-17/#SECURITY-1521
x_refsource_CONFIRMVendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-16568

Link	Providers	Tags
http://www.openwall.com/lists/oss-security/2019/12/17/1		mailing-listx_refsource_MLISTMailing ListThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-5254		Advisory
https://github.com/advisories/GHSA-rxph-cq38-gm3g		Advisory
https://github.com/jenkins-infra/update-center2/pull/324
https://jenkins.io/security/advisory/2019-12-17/#SECURITY-1521		x_refsource_CONFIRMVendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-16568