CVE-2019-10391

2019-08-2816:15:11

Google

osv.dev

6.6 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.5%

JSON

Jenkins IBM Application Security on Cloud Plugin 1.2.4 and earlier transmitted configured passwords in plain text as part of job configuration forms, potentially resulting in their exposure.

CPENameOperatorVersion
ibm-asoc-plugineqibm-application-security-1.1.1
ibm-asoc-plugineqibm-application-security-1.1.2
ibm-asoc-plugineqibm-application-security-1.1.3
ibm-asoc-plugineqibm-application-security-1.1
ibm-asoc-plugineqibm-application-security-1.2.2
ibm-asoc-plugineqibm-application-security-1.2.4
ibm-asoc-plugineqibm-application-security-1.2.3
ibm-asoc-plugineqibm-application-security-1.2.0
ibm-asoc-plugineqibm-application-security-1.0
ibm-asoc-plugineqibm-application-security-1.2.1

Name	Operator	Version
ibm-asoc-plugin	eq	ibm-application-security-1.1.1
ibm-asoc-plugin	eq	ibm-application-security-1.1.2
ibm-asoc-plugin	eq	ibm-application-security-1.1.3
ibm-asoc-plugin	eq	ibm-application-security-1.1
ibm-asoc-plugin	eq	ibm-application-security-1.2.2
ibm-asoc-plugin	eq	ibm-application-security-1.2.4
ibm-asoc-plugin	eq	ibm-application-security-1.2.3
ibm-asoc-plugin	eq	ibm-application-security-1.2.0
ibm-asoc-plugin	eq	ibm-application-security-1.0
ibm-asoc-plugin	eq	ibm-application-security-1.2.1