Lucene search
GoogleOSV:GHSA-6FV3-W7J6-5XFCHistoryMay 24, 2022 - 4:59 p.m.
Jenkins Sonar Gerrit Plugin stores credentials unencrypted
2022-05-2416:59:37
Google
osv.dev
10
jenkins
sonar
gerrit
plugin
unencrypted
credentials
config.xml
files
master
users
extended read
permission
file system
software
EPSS
0.001
Percentile
28.4%
Jenkins Sonar Gerrit Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.
Related
prion
prion
Design/Logic Flaw
2019-10-23 13:15:00
cve
cve
CVE-2019-10467
2019-10-23 13:15:10
osv
osv
CVE-2019-10467
2019-10-23 13:15:10
cvelist
cvelist
CVE-2019-10467
2019-10-23 12:45:41
nvd
nvd
CVE-2019-10467
2019-10-23 13:15:10
github
github
Jenkins Sonar Gerrit Plugin stores credentials unencrypted
2022-05-24 16:59:37