Lucene search

CVE-2019-10320

🗓️ 21 May 2019 13:00:29Reported by jenkinsType

Jenkins Credentials Plugin 2.1.18 allows file existence confirmation and certificate content retrieval

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 12
OSV	CVE-2019-10320	21 May 201913:29	–	osv
OSV	Insertion of Sensitive Information into Externally-Accessible File or Directory in Jenkins Credentials Plugin	24 May 202216:46	–	osv
OSV	RHSA-2019:1636 Red Hat Security Advisory: OpenShift Container Platform 4.1 jenkins-2-plugins security update	16 Sep 202402:41	–	osv
OSV	RHBA-2019:1605 Red Hat Bug Fix Advisory: OpenShift Container Platform 3.11 bug fix and enhancement update	16 Sep 202402:39	–	osv
NVD	CVE-2019-10320	21 May 201913:29	–	nvd
Prion	Code injection	21 May 201913:29	–	prion
Veracode	Information Disclosure	8 Jul 201900:06	–	veracode
Cvelist	CVE-2019-10320	21 May 201913:00	–	cvelist
Github Security Blog	Insertion of Sensitive Information into Externally-Accessible File or Directory in Jenkins Credentials Plugin	24 May 202216:46	–	github
RedhatCVE	CVE-2019-10320	10 Oct 201917:40	–	redhatcve

Nvd

Node

jenkins credentialsRange≤2.1.18jenkins

[
  {
    "product": "Jenkins Credentials Plugin",
    "vendor": "Jenkins project",
    "versions": [
      {
        "status": "affected",
        "version": "2.1.18 and earlier"
      }
    ]
  }
]

Source	Link
wwws	www.wwws.nightwatchcybersecurity.com/2019/05/23/exploring-the-file-system-via-jenkins-credentials-plugin-vulnerability-cve-2019-10320/
openwall	www.openwall.com/lists/oss-security/2019/05/21/1
jenkins	www.jenkins.io/security/advisory/2019-05-21/
seclists	www.seclists.org/fulldisclosure/2019/May/39
access	www.access.redhat.com/errata/RHSA-2019:1636
access	www.access.redhat.com/errata/RHBA-2019:1605
securityfocus	www.securityfocus.com/bid/108462

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

21 May 2019 13:29Current

4.6Medium risk

Vulners AI Score4.6

CVSS24

CVSS34.3

EPSS0.00118

CWE-538