Lucene search
GoogleOSV:GHSA-J8C7-FM85-6JJ6HistoryMay 24, 2022 - 4:56 p.m.
Jenkins Call Remote Job Plugin has Insufficiently Protected Credentials
2022-05-2416:56:46
Google
osv.dev
8
jenkins
remote job
password
unencrypted
security
advisory
EPSS
0.001
Percentile
28.4%
Call Remote Job Plugin stores a password unencrypted in job config.xml files on the Jenkins controller. This password can be viewed by users with Extended Read permission, or access to the Jenkins controller file system.
As of publication of this advisory, there is no fix.
Related
cvelist
cvelist
CVE-2019-10422
2019-09-25 15:05:33
nvd
nvd
CVE-2019-10422
2019-09-25 16:15:11
cve
cve
CVE-2019-10422
2019-09-25 16:15:11
prion
prion
Design/Logic Flaw
2019-09-25 16:15:00
github
github
Jenkins Call Remote Job Plugin has Insufficiently Protected Credentials
2022-05-24 16:56:46