CVE-2019-1003065

CVE-2019-1003065 affects the Jenkins CloudShare Docker-Machine Plugin. The issue is that credentials are stored in plaintext in the plugin’s global configuration file on the Jenkins master/controller, specifically in the file com.cloudshare.jenkins.CloudShareConfiguration.xml. This allows users w...

CVE-2019-1003065

Jenkins CloudShare Docker-Machine Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...