CVE-2019-1003055

Jenkins FTP publisher Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

CVE-2019-1003053

Jenkins HockeyApp Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

CVE-2019-1003055

Jenkins FTP publisher Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

CVE-2019-1003054

CVE-2019-1003054 relates to the Jenkins Jira Issue Updater Plugin, where credentials are stored unencrypted in job config.xml on the Jenkins master/controller. The vulnerability arises from credentials being accessible to any user with Extended Read permission or with access to the master/control...

CVE-2019-1003053

The CVE-2019-1003053 entry concerns the Jenkins HockeyApp Plugin, where credentials are stored in plaintext in job config.xml files on the Jenkins master. The underlying issue is improper credential handling in the plugin, making secrets viewable to users with Extended Read permission or anyone w...

CVE-2019-1003055

CVE-2019-1003055 concerns the Jenkins FTP publisher Plugin, where credentials are stored unencrypted in the global configuration file on the Jenkins master (com.zanox.hudson.plugins.FTPPublisher.xml). This design allows users with master filesystem access to view credentials. Public details consi...

CVE-2019-1003052

CVE-2019-1003052 affects the Jenkins AWS Elastic Beanstalk Publisher Plugin. The credential data is stored in plaintext in the plugin’s global configuration file on the Jenkins master/controller (org.jenkinsci.plugins.awsbeanstalkpublisher.AWSEBPublisher.xml), allowing any user with master filesy...

CVE-2019-1003052

Jenkins AWS Elastic Beanstalk Publisher Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

CVE-2019-1003053

Jenkins HockeyApp Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

CVE-2019-1003054

Jenkins Jira Issue Updater Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

CVE-2019-1003051

Jenkins IRC Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

CVE-2019-1003051

Jenkins IRC Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

CVE-2019-1003051

Affected software: Jenkins with the IRC Plugin. Vulnerability detail: Credentials are stored unencrypted in the plugin’s global configuration file on the Jenkins master, specifically inside hudson.plugins.ircbot.IrcPublisher.xml, accessible to anyone with Jenkins master filesystem access. Root ca...

PT-2019-11684 · Jenkins · Jenkins Klaros-Testmanagement Plugin

Name of the Vulnerable Software and Affected Versions: Jenkins Klaros-Testmanagement Plugin affected versions not specified Description: The issue concerns the storage of credentials in an unencrypted manner within job config.xml files on the Jenkins master or controller. These credentials can be...

PT-2019-11379 · Jenkins · Jenkins Upload To Pgyer Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Upload to pgyer Plugin affected versions not specified Description: The issue concerns the storage of credentials in an unencrypted manner in job config.xml files on the Jenkins master. These credentials can be accessed by users who...

PT-2019-11345 · Jenkins · Jenkins Ftp Publisher Plugin

Name of the Vulnerable Software and Affected Versions: Jenkins FTP publisher Plugin affected versions not specified Description: The issue concerns the storage of credentials in an unencrypted manner within the global configuration file on the Jenkins master or controller. Specifically, the...

PT-2019-11358 · Vmware +1 · Vrealize Automation Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins VMware vRealize Automation Plugin affected versions not specified Description: The issue concerns the storage of credentials in an unencrypted manner within job config.xml files on the Jenkins master or controller. These credentials c...

PT-2019-11347 · Jenkins · Jenkins Bitbucket Approve Plugin

Name of the Vulnerable Software and Affected Versions: Jenkins Bitbucket Approve Plugin affected versions not specified Description: The issue concerns the storage of credentials in an unencrypted manner within the global configuration file on the Jenkins master or controller. Specifically, the...

PT-2019-11356 · Jenkins · Jenkins Bugzilla Plugin

Name of the Vulnerable Software and Affected Versions: Jenkins Bugzilla Plugin affected versions not specified Description: The issue concerns the storage of credentials in an unencrypted manner within the global configuration file on the Jenkins master or controller. Specifically, credentials ar...

PT-2019-11341 · Jenkins · Jenkins Irc Plugin

Name of the Vulnerable Software and Affected Versions: Jenkins IRC Plugin affected versions not specified Description: The issue concerns the storage of credentials in an unencrypted manner within the global configuration file on the Jenkins master or controller. Specifically, credentials are...