Lucene search
GoogleOSV:GHSA-MHQ6-H9M7-WQ8CHistoryMay 24, 2022 - 4:56 p.m.
Jenkins Assembla Plugin has Insufficiently Protected Credentials
2022-05-2416:56:46
Google
osv.dev
14
0.0004 Low
EPSS
Percentile
12.6%
Assembla Plugin stores the Assembla password unencrypted in its global configuration file jenkins.plugin.assembla.AssemblaProjectProperty.xml on the Jenkins controller. This password can be viewed by users with access to the Jenkins controller file system.
As of publication of this advisory, there is no fix.
| CPE | Name | Operator | Version |
|---|---|---|---|
| org.jenkins-ci.plugins:assembla | eq | 1.4 | |
| org.jenkins-ci.plugins:assembla | eq | 1.2 | |
| org.jenkins-ci.plugins:assembla | eq | 1.3 |
Related
nvd
nvd
CVE-2019-10420
2019-09-25 16:15:11
cve
cve
CVE-2019-10420
2019-09-25 16:15:11
github
github
Jenkins Assembla Plugin has Insufficiently Protected Credentials
2022-05-24 16:56:46
prion
prion
Design/Logic Flaw
2019-09-25 16:15:00
osv
osv
CVE-2019-10420
2019-09-25 16:15:11
cvelist
cvelist
CVE-2019-10420
2019-09-25 15:05:33