CVE-2019-10320

2019-05-2113:00:22

jenkins

www.cve.org

4.8 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.1%

JSON

Jenkins Credentials Plugin 2.1.18 and earlier allowed users with permission to create or update credentials to confirm the existence of files on the Jenkins master with an attacker-specified path, and obtain the certificate content of files containing a PKCS#12 certificate.

CNA Affected

[
  {
    "product": "Jenkins Credentials Plugin",
    "vendor": "Jenkins project",
    "versions": [
      {
        "status": "affected",
        "version": "2.1.18 and earlier"
      }
    ]
  }
]