org.jenkins-ci.plugins:credentials-binding (>=1.3, <=1.5), org.jenkins-ci.plugins:git (>=2.2.11, <=2.3.4) +2 more potentially affected by CVE-2019-10320 via org.jenkins-ci.plugins:credentials (1.20)

org.jenkins-ci.plugins:credentials MAVEN version 1.20 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - org.jenkins-ci.plugins:credentials-binding =1.3, =2.2.11, =0.0.1-beta7, =0.0.1-beta12 -...

com.tikalk.hudson.plugins:notification (>=1.12, <=1.13), net.praqma:memory-map (>=2.2.0, <=2.2.1) +36 more potentially affected by CVE-2019-10320 via org.jenkins-ci.plugins:credentials (1.21)

org.jenkins-ci.plugins:credentials MAVEN version 1.21 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - com.tikalk.hudson.plugins:notification =1.12, =2.2.0, =3.0-rc1, =1.2.1, =1.14.2, =2.3,...

com.logmein:pipeline-bamboo (>=0.0.1, <=0.0.2), de.taimos:pipeline-aws (>=1.6, <=1.13) +14 more potentially affected by CVE-2019-10320 via org.jenkins-ci.plugins:credentials (1.25)

org.jenkins-ci.plugins:credentials MAVEN version 1.25 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - com.logmein:pipeline-bamboo =0.0.1, =1.6, =1.2, =1.1.0, =2.4.3, =1.6, =1.0.3, =1.0, =1.5.5,...

org.jenkins-ci.plugins:git-client (1.6.2), org.jenkins-ci.plugins:ssh-agent (>=1.4.1, <=1.4.2) +1 more potentially affected by CVE-2019-10320 via org.jenkins-ci.plugins:credentials (1.9.2)

org.jenkins-ci.plugins:credentials MAVEN version 1.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - org.jenkins-ci.plugins:git-client 1.6.2 - org.jenkins-ci.plugins:ssh-agent =1.4.1, =1.4.2 -...

org.biouno:uno-choice (>=1.0, <=1.4), org.jenkins-ci.plugins:git (2.0.1) +4 more potentially affected by CVE-2019-10320 via org.jenkins-ci.plugins:credentials (1.9.3)

org.jenkins-ci.plugins:credentials MAVEN version 1.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - org.biouno:uno-choice =1.0, =1.8.3, =1.8.5 - org.jenkins-ci.plugins:scriptler 2.7 -...

com.byclosure.jenkins.plugins:gcloud-sdk (0.0.1), com.qasymphony.ci.jenkins:qtest (>=1.3.0, <=1.4.6) +36 more potentially affected by CVE-2019-10320 via org.jenkins-ci.plugins:credentials (1.16.1)

org.jenkins-ci.plugins:credentials MAVEN version 1.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - com.byclosure.jenkins.plugins:gcloud-sdk 0.0.1 - com.qasymphony.ci.jenkins:qtest =1.3.0,...

org.jenkins-ci.plugins:changelog-history (>=1.6, <=1.7), org.jenkins-ci.plugins:ec2-deployment-dashboard (>=1.0.2, <=1.0.10) +1 more potentially affected by CVE-2019-10320 via org.jenkins-ci.plugins:credentials (1.16)

org.jenkins-ci.plugins:credentials MAVEN version 1.16 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - org.jenkins-ci.plugins:changelog-history =1.6, =1.0.2, =1.0.10 -...

com.aliyun.www:aliyun-container-service-deploy (0.1.0), de.tsystems.mms.apm:loadrunner (1.1) +10 more potentially affected by CVE-2019-10320 via org.jenkins-ci.plugins:credentials (1.18)

org.jenkins-ci.plugins:credentials MAVEN version 1.18 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - com.aliyun.www:aliyun-container-service-deploy 0.1.0 - de.tsystems.mms.apm:loadrunner 1.1 -...

com.blazemeter.plugins:blazemeterjenkinsplugin (>=1.04-beta-1, <=2.4), com.cloudbees.jenkins.plugins:bees-sdk-plugin (>=1.0, <=1.2) +8 more potentially affected by CVE-2019-10320 via org.jenkins-ci.plugins:credentials (1.3)

org.jenkins-ci.plugins:credentials MAVEN version 1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - com.blazemeter.plugins:blazemeterjenkinsplugin =1.04-beta-1, =1.0, =1.0, =1.0, =1.1, =0.1,...

org.jenkins-ci.plugins:crx-content-package-deployer (>=1.5, <=1.9) potentially affected by CVE-2019-10320 via org.jenkins-ci.plugins:credentials (1.17)

org.jenkins-ci.plugins:credentials MAVEN version 1.17 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - org.jenkins-ci.plugins:crx-content-package-deployer =1.5, =1.9 Source cves: CVE-2019-10320...

br.com.ingenieux.jenkins.plugins:awseb-deployment-plugin (>=0.1.0, <=0.3.15), br.com.ingenieux.jenkins.plugins:codecommit-url-helper (0.0.1) +68 more potentially affected by CVE-2019-10320 via org.jenkins-ci.plugins:credentials (1.22)

org.jenkins-ci.plugins:credentials MAVEN version 1.22 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - br.com.ingenieux.jenkins.plugins:awseb-deployment-plugin =0.1.0, =1.0, =1.0-beta-1, =1.2,...

com.mathworks.polyspace.jenkins:mathworks-polyspace (0.1.0), eu.markov.jenkins.plugin.mvnmeta:maven-metadata-plugin (2.0.0) +4 more potentially affected by CVE-2019-10320 via org.jenkins-ci.plugins:credentials (1.14)

org.jenkins-ci.plugins:credentials MAVEN version 1.14 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - com.mathworks.polyspace.jenkins:mathworks-polyspace 0.1.0 -...

com.coravy.hudson.plugins.github:github (>=1.9, <=1.12.1), org.jenkins-ci.plugins:elasticbox (>=0.9.14, <=4.0.0) +7 more potentially affected by CVE-2019-10320 via org.jenkins-ci.plugins:credentials (1.8.3)

org.jenkins-ci.plugins:credentials MAVEN version 1.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - com.coravy.hudson.plugins.github:github =1.9, =0.9.14, =2.0-beta-3, =1.4.6, =1.5, =1.3,...

com.blackducksoftware.integration:blackduck-detect (>=1.0.0, <=1.2.0), com.blackducksoftware.integration:blackduck-hub (>=2.2.0, <=3.1.0) +30 more potentially affected by CVE-2019-10320 via org.jenkins-ci.plugins:credentials (1.9.4)

org.jenkins-ci.plugins:credentials MAVEN version 1.9.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - com.blackducksoftware.integration:blackduck-detect =1.0.0, =2.2.0, =1.27, =0.3.4, =0.1.2,...

org.jenkins-ci.plugins:assembla-merge-request-builder (>=1.1.1, <=1.1.13), org.jenkins-ci.plugins:bitbucket-pullrequest-builder (>=1.4.6, <=1.4.28) +6 more potentially affected by CVE-2019-10320 via org.jenkins-ci.plugins:credentials (1.15)

org.jenkins-ci.plugins:credentials MAVEN version 1.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - org.jenkins-ci.plugins:assembla-merge-request-builder =1.1.1, =1.4.6, =1.13-1, =2.2.3, =1.0....

org.jenkins-ci.plugins:subversion (>=2.0-alpha-1, <=2.0) potentially affected by CVE-2019-10320 via org.jenkins-ci.plugins:credentials (1.8.1)

org.jenkins-ci.plugins:credentials MAVEN version 1.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - org.jenkins-ci.plugins:subversion =2.0-alpha-1, =2.0 Source cves: CVE-2019-10320 Source...

RHEL 7 : OpenShift Container Platform 4.1 jenkins-2-plugins (RHSA-2019:1636)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:1636 advisory. This advisory contains the jenkins-2-plugins RPM packages for Red Hat OpenShift Container Platform 4.1.4. See the following advisory for the...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.1 jenkins-2-plugins security update

An update for jenkins-2-plugins is now available for Red Hat OpenShift Container Platform 4.1. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

CVE-2019-10320

Jenkins Credentials Plugin 2.1.18 and earlier allowed users with permission to create or update credentials to confirm the existence of files on the Jenkins master with an attacker-specified path, and obtain the certificate content of files containing a PKCS12 certificate...

CVE-2019-10320

CVE-2019-10320 affects Jenkins Credentials Plugin (versions ≤ 2.1.18). An authenticated user with credential-management permission could confirm the existence of files on the Jenkins master via an attacker-controlled path, and read PKCS#12 certificate content from those files. This is a file-read...