Lucene search
GoogleOSV:GHSA-PH9F-H462-J5JGHistoryMay 13, 2022 - 1:15 a.m.
Jenkins Diawi Upload Plugin stores credentials in plain text
2022-05-1301:15:05
Google
osv.dev
4
jenkins
diawi
upload plugin
credentials
plain text
job config.xml
files
controller
unencrypted
extended read permission
file system
security
Jenkins Diawi Upload Plugin stores credentials unencrypted in job config.xml files on the Jenkins controller. These credentials can be viewed by users with Extended Read permission, or access to the Jenkins controller file system.
Related
cvelist
cvelist
CVE-2019-10284
2019-04-04 15:38:49
alpinelinux
alpinelinux
CVE-2019-10284
2019-04-04 16:29:02
prion
prion
Design/Logic Flaw
2019-04-04 16:29:00
github
github
Jenkins Diawi Upload Plugin stores credentials in plain text
2022-05-13 01:15:05
cve
cve
CVE-2019-10284
2019-04-04 16:29:02
nvd
nvd
CVE-2019-10284
2019-04-04 16:29:02