Lucene search
K

CVE-2013-5676

🗓️ 13 Dec 2013 17:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 43 Views🌐 WEB

The Jenkins Plugin for SonarQube 3.7 and earlier allows remote authenticated users to obtain sensitive information

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
Cvelist
CVE-2013-5676
13 Dec 201317:00
cvelist
Exploit DB
SonarQube Jenkins Plugin - Plain Text Password
18 Dec 201300:00
exploitdb
EUVD
EUVD-2013-5514
7 Oct 202500:30
euvd
exploitpack
SonarQube Jenkins Plugin - Plain Text Password
18 Dec 201300:00
exploitpack
Github Security Blog
Jenkins SonarQube Plugin Stores Passwords in Cleartext
17 May 202204:56
github
NVD
CVE-2013-5676
13 Dec 201318:55
nvd
OSV
GHSA-3X9H-3P7M-33M7 Jenkins SonarQube Plugin Stores Passwords in Cleartext
17 May 202204:56
osv
Packet Storm
SonarQube Jenkins Password Disclosure
13 Aug 201600:00
packetstorm
Prion
Design/Logic Flaw
13 Dec 201318:55
prion
securityvulns
[CVE-2013-5676] Plain Text Password In SonarQube Jenkins Plugin
9 Jan 201400:00
securityvulns
Rows per page
NVD
Node
sonarsourcejenkins_pluginMatch----sonarqube
AND
ParameterPositionPathDescriptionCWE
sonar.sonarPasswordnestedjenkins/configurePlain text password exposed in Jenkins SonarQube plugin configuration via the sonar.sonarPassword parameterCWE-310

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

29 Apr 2026 01:13Current
5.7Medium risk
Vulners AI Score5.7
CVSS 24
EPSS0.05307
43