CVE-2019-10347

2019-07-1114:15:10

Google

osv.dev

6.5 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.2%

JSON

Jenkins Mashup Portlets Plugin stored credentials unencrypted on the Jenkins master where they can be viewed by users with access to the master file system.

CPENameOperatorVersion
mashup-portlets-plugineqmashup-portlets-plugin-0.9
mashup-portlets-plugineqmashup-portlets-plugin-0.9.1
mashup-portlets-plugineqmashup-portlets-plugin-1.0.6
mashup-portlets-plugineqmashup-portlets-plugin-1.0.9
mashup-portlets-plugineqmashup-portlets-plugin-1.0.8
mashup-portlets-plugineqmashup-portlets-plugin-1.0.3
mashup-portlets-plugineqmashup-portlets-plugin-1.0.0
mashup-portlets-plugineqmashup-portlets-plugin-0.9.3
mashup-portlets-plugineqmashup-portlets-plugin-1.0.5
mashup-portlets-plugineqmashup-portlets-plugin-0.9.2

Name	Operator	Version
mashup-portlets-plugin	eq	mashup-portlets-plugin-0.9
mashup-portlets-plugin	eq	mashup-portlets-plugin-0.9.1
mashup-portlets-plugin	eq	mashup-portlets-plugin-1.0.6
mashup-portlets-plugin	eq	mashup-portlets-plugin-1.0.9
mashup-portlets-plugin	eq	mashup-portlets-plugin-1.0.8
mashup-portlets-plugin	eq	mashup-portlets-plugin-1.0.3
mashup-portlets-plugin	eq	mashup-portlets-plugin-1.0.0
mashup-portlets-plugin	eq	mashup-portlets-plugin-0.9.3
mashup-portlets-plugin	eq	mashup-portlets-plugin-1.0.5
mashup-portlets-plugin	eq	mashup-portlets-plugin-0.9.2