Lucene search
GoogleOSV:GHSA-PXGR-RC8G-PJ7RHistoryMay 13, 2022 - 1:15 a.m.
Jenkins crittercism-dsym Plugin stores API key in plain text
2022-05-1301:15:02
Google
osv.dev
9
jenkins
crittercism-dsym
plugin
api key
plain text
credentials
unencrypted
config.xml
files
jenkins controller
users
extended read permission
file system
software
Jenkins crittercism-dsym Plugin stores credentials unencrypted in job config.xml files on the Jenkins controller. These credentials can be viewed by users with Extended Read permission, or access to the Jenkins controller file system.
Related
alpinelinux
alpinelinux
CVE-2019-10295
2019-04-04 16:29:03
cvelist
cvelist
CVE-2019-10295
2019-04-04 15:38:50
prion
prion
Design/Logic Flaw
2019-04-04 16:29:00
cve
cve
CVE-2019-10295
2019-04-04 16:29:03
github
github
Jenkins crittercism-dsym Plugin stores API key in plain text
2022-05-13 01:15:02
nvd
nvd
CVE-2019-10295
2019-04-04 16:29:03