CVE-2019-10366

Jenkins Skytap Cloud CI Plugin 2.06 and earlier stored credentials unencrypted in job config.xml files on the Jenkins master where they could be viewed by users with Extended Read permission, or access to the master file system...

CVE-2019-10366

CVE-2019-10366 affects the Jenkins Skytap Cloud CI Plugin up to version 2.06. The issue is that credentials were stored in plaintext in job config.xml files on the Jenkins master, allowing disclosure to users with Extended Read permission or anyone with access to the master filesystem. The connec...