2 matches found
CVE-2019-10351
Jenkins Caliper CI Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...
8.8CVSS8.7AI score0.01632EPSS
SaveExploits0References4
CVE-2019-10351
CVE-2019-10351 affects Jenkins Caliper CI Plugin, where credentials are stored unencrypted in job config.xml on the Jenkins master. This allows exposure to users with Extended Read permission or access to the master filesystem, with high-severity impact per CVSS 3.1 (C:H, I:H, A:H). The connected...
8.8CVSS8.6AI score0.01632EPSS
SaveExploits0References4Affected Software1
20