Stored credentials unencrypted in Jenkins Mashup Portlets Plugin

🗓️ 24 May 2022 16:03:50Reported by GitHub Advisory DatabaseType

Stored credentials in Jenkins Mashup Portlets Plugi

Reporter	Title	Published	Views	Family All 6
Prion	Design/Logic Flaw	11 Jul 201914:15	–	prion
OSV	CVE-2019-10347	11 Jul 201914:15	–	osv
OSV	Stored credentials unencrypted in Jenkins Mashup Portlets Plugin	24 May 202216:50	–	osv
Cvelist	CVE-2019-10347	11 Jul 201913:55	–	cvelist
NVD	CVE-2019-10347	11 Jul 201914:15	–	nvd
CVE	CVE-2019-10347	11 Jul 201914:15	–	cve

Vulners

Node

javagh.jenkins mashup-portlets-pluginRange≤1.0.9

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-10347
jenkins	www.jenkins.io/security/advisory/2019-07-11/
openwall	www.openwall.com/lists/oss-security/2019/07/11/4
securityfocus	www.securityfocus.com/bid/109156
github	www.github.com/jenkinsci/mashup-portlets-plugin/commit/05eb9bfd5c758c8c477ce6bd4315fd65d83e9a0a
github	www.github.com/advisories/GHSA-9p5v-6p5f-f28h

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

24 May 2022 16:50Current

6.7Medium risk

Vulners AI Score6.7

CVSS24

CVSS38.8

EPSS0.003

CWE-522