CVE-2019-1003068

CVE-2019-1003068 affects the Jenkins VMware vRealize Automation Plugin, where credentials are stored unencrypted in job config.xml files on the Jenkins master/controller. The vulnerability allows access by users with Extended Read permission or anyone with access to the master/controller file sys...

CVE-2019-1003068

Jenkins VMware vRealize Automation Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...