Jenkins Maven Release Plug-in Plugin stored credentials in plain text

🗓️ 24 May 2022 16:51:51Reported by GitHub Advisory DatabaseType

Jenkins Maven Release Plug-in Plugin stored credentials in plain text and now stores credentials encrypted on the Jenkins controller file syste

Reporter	Title	Published	Views	Family All 6
OSV	Jenkins Maven Release Plug-in Plugin stored credentials in plain text	24 May 202216:51	–	osv
NVD	CVE-2019-10361	31 Jul 201913:15	–	nvd
Cvelist	CVE-2019-10361	31 Jul 201912:45	–	cvelist
Prion	Design/Logic Flaw	31 Jul 201913:15	–	prion
Zero Day Initiative	Jenkins Maven Release Cleartext Storage of Credentials Information Disclosure Vulnerability	17 Sep 201900:00	–	zdi
CVE	CVE-2019-10361	31 Jul 201913:15	–	cve

Vulners

Node

org.jenkins-ci.plugins.m2release m2releaseRange≤0.14.0

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-10361
jenkins	www.jenkins.io/security/advisory/2019-07-31/
openwall	www.openwall.com/lists/oss-security/2019/07/31/1
github	www.github.com/jenkinsci/m2release-plugin/commit/a2e7f2bb82640a9d3641265a19c86ba141a7e79c
github	www.github.com/advisories/GHSA-vwx8-qpqh-qwm9

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

24 May 2022 16:51Current

6.5Medium risk

Vulners AI Score6.5

CVSS22.1

CVSS35.5

EPSS0.001

CWE-522