Design/Logic Flaw

2014-05-0814:29:00

PRIOn knowledge base

www.prio-n.com

6.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

The Subversion plugin before 1.54 for Jenkins stores credentials using base64 encoding, which allows local users to obtain passwords and SSH private keys by reading a subversion.credentials file.

CPENameOperatorVersion
subversion-plugineq1.27
subversion-plugineq1.44
subversion-plugineq1.18
subversion-plugineq1.12
subversion-plugineq1.39
subversion-plugineq1.38
subversion-plugineq1.24
subversion-plugineq1.32
subversion-plugineq1.1
subversion-plugineq1.46

Name	Operator	Version
subversion-plugin	eq	1.27
subversion-plugin	eq	1.44
subversion-plugin	eq	1.18
subversion-plugin	eq	1.12
subversion-plugin	eq	1.39
subversion-plugin	eq	1.38
subversion-plugin	eq	1.24
subversion-plugin	eq	1.32
subversion-plugin	eq	1.1
subversion-plugin	eq	1.46