CVE-2019-10411

2019-09-2516:15:11

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.1%

JSON

Jenkins Inedo BuildMaster Plugin 2.4.0 and earlier transmitted configured credentials in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure.

CPENameOperatorVersion
inedo-buildmaster-plugineq2.4.0
inedo-buildmaster-plugineq2.1.1
inedo-buildmaster-plugineq2.0.2
inedo-buildmaster-plugineq2.2.0
inedo-buildmaster-plugineq2.3.0
inedo-buildmaster-plugineq1.0
inedo-buildmaster-plugineq1.3
inedo-buildmaster-plugineq2.0
inedo-buildmaster-plugineq1.2
inedo-buildmaster-plugineq2.0.1

Name	Operator	Version
inedo-buildmaster-plugin	eq	2.4.0
inedo-buildmaster-plugin	eq	2.1.1
inedo-buildmaster-plugin	eq	2.0.2
inedo-buildmaster-plugin	eq	2.2.0
inedo-buildmaster-plugin	eq	2.3.0
inedo-buildmaster-plugin	eq	1.0
inedo-buildmaster-plugin	eq	1.3
inedo-buildmaster-plugin	eq	2.0
inedo-buildmaster-plugin	eq	1.2
inedo-buildmaster-plugin	eq	2.0.1