CVE-2019-10425

Jenkins Google Calendar Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

CVE-2019-10425

The CVE-2019-10425 entry concerns the Jenkins Google Calendar Plugin, where credentials are stored unencrypted in job config.xml files on the Jenkins master. The underlying issue allows users with Extended Read permission or with access to the master file system to view these credentials. The ava...