com.barchart.jenkins:maven-release-cascade (>=1.0.0, <=1.3.2), com.cloudbees.jenkins.plugins:xpdev (1.0) +18 more potentially affected by CVE-2013-6372 via org.jenkins-ci.plugins:subversion (>=1.25, <=1.45)

org.jenkins-ci.plugins:subversion MAVEN version =1.25, =1.0.0, =0.33, =1.412, =2.0.8, =1.5, =1.12, =0.1.0, =0.0.6, =2.1, =1.0, =1.3 and more Source cves: CVE-2013-6372 Source advisory: GHSA-C4FR-GX5W-8QF2...

CVE-2013-6372

The Subversion plugin before 1.54 for Jenkins stores credentials using base64 encoding, which allows local users to obtain passwords and SSH private keys by reading a subversion.credentials file...

CVE-2013-6372

The CVE-2013-6372 issue affects the Jenkins Subversion plugin prior to version 1.54. The vulnerability arises because credentials are stored using base64 encoding in a subversion.credentials file, allowing local users to read and extract passwords and SSH private keys. Impact is limited to local ...