CVE-2019-10427

2019-09-2516:15:12

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.7%

JSON

Jenkins Aqua MicroScanner Plugin 1.0.7 and earlier transmitted configured credentials in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure.

CPENameOperatorVersion
aqua-microscanner-plugineqaqua-microscanner-1.0.2
aqua-microscanner-plugineqaqua-microscanner-1.0.4
aqua-microscanner-plugineqaqua-microscanner-1.0.1
aqua-microscanner-plugineqaqua-microscanner-1.0.0
aqua-microscanner-plugineqaqua-microscanner-1.0.5
aqua-microscanner-plugineqaqua-microscanner-1.0.7
aqua-microscanner-plugineqaqua-microscanner-1.0.6
aqua-microscanner-plugineqaqua-microscanner-1.0.3

Name	Operator	Version
aqua-microscanner-plugin	eq	aqua-microscanner-1.0.2
aqua-microscanner-plugin	eq	aqua-microscanner-1.0.4
aqua-microscanner-plugin	eq	aqua-microscanner-1.0.1
aqua-microscanner-plugin	eq	aqua-microscanner-1.0.0
aqua-microscanner-plugin	eq	aqua-microscanner-1.0.5
aqua-microscanner-plugin	eq	aqua-microscanner-1.0.7
aqua-microscanner-plugin	eq	aqua-microscanner-1.0.6
aqua-microscanner-plugin	eq	aqua-microscanner-1.0.3