CVE-2019-1003097

CVE-2019-1003097 affects the Jenkins Crowd Integration Plugin, where credentials are stored unencrypted in the global config.xml on the Jenkins master. This allows users with access to the master file system to view sensitive data. The available connected documents confirm the affected component ...

CVE-2019-10282

Jenkins Klaros-Testmanagement Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

CVE-2019-10286

Jenkins DeployHub Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

CVE-2019-10284

Jenkins Diawi Upload Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

CVE-2019-10285

Affected software : Jenkins Minio Storage Plugin. Vulnerability : credentials are stored unencrypted in the global configuration file on the Jenkins master, specifically in org.jenkinsci.plugins.minio.MinioUploader.xml. Root cause : lack of encryption for stored credentials in the plugin’s config...

CVE-2019-10283

The CVE-2019-10283 entry relates to the Jenkins mabl Plugin storing credentials unencrypted in job config.xml files on the Jenkins master/controller, allowing access by users with Extended Read permission or direct master access. This vulnerability is consistently described across multiple source...

CVE-2019-10282

CVE-2019-10282 affects the Jenkins Klaros-Testmanagement Plugin. The issue is that credentials are stored unencrypted in job config.xml files on the Jenkins master/controller, allowing users with Extended Read permission or access to the master/file system to view them. The public descriptions in...

CVE-2019-1003088

The CVE-2019-1003088 entry concerns Jenkins Fabric Beta Publisher Plugin. The provided documents indicate that the plugin stores credentials unencrypted in job config.xml files on the Jenkins master, allowing credential access by users with Extended Read permission or anyone with access to the ma...

CVE-2019-10277

Jenkins StarTeam Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

CVE-2019-10283

Jenkins mabl Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

CVE-2019-1003096

Jenkins TestFairy Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

CVE-2019-1003095

Jenkins Perfecto Mobile Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

CVE-2019-10286

The CVE-2019-10286 issue concerns the Jenkins DeployHub Plugin storing credentials in plaintext in job config.xml files on the Jenkins master/controller. This can allow users with Extended Read permission or users with filesystem access to view sensitive credentials. The Connected documents confi...

CVE-2019-10277

Jenkins StarTeam Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

CVE-2019-10285

Jenkins Minio Storage Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

CVE-2019-10286

Jenkins DeployHub Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

CVE-2019-1003097

Jenkins Crowd Integration Plugin stores credentials unencrypted in the global config.xml configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

CVE-2019-10280

CVE-2019-10280 affects the Jenkins Assembla Auth Plugin. The issue is that credentials are stored unencrypted in the global config.xml on the Jenkins master, allowing access to those credentials by users who can access the master filesystem. The connected documents confirm the vulnerable storage ...

CVE-2019-10277

CVE-2019-10277 affects the Jenkins StarTeam Plugin. The vulnerability arises because credentials are stored unencrypted in job config.xmls on the Jenkins master, enabling exposure to users with Extended Read permission or anyone with master filesystem access. Impact: confidentiality and integrity...

CVE-2019-1003096

CVE-2019-1003096 affects the Jenkins TestFairy Plugin, where credentials are stored unencrypted in job config.xml files on the Jenkins master. The underlying issue is unencrypted credential storage, allowing access by users with Extended Read permission or anyone with access to the master filesys...