CVE-2019-10297

Jenkins Sametime Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

CVE-2019-10297

CVE-2019-10297 affects the Jenkins Sametime Plugin. The vulnerability arises because credentials are stored unencrypted in the plugin’s global configuration on the Jenkins master, specifically within hudson.plugins.sametime.im.transport.SametimePublisher.xml, and can be read by anyone with access...

CVE-2019-10297

Jenkins Sametime Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...