CVE-2019-10298

CVE-2019-10298 : The issue affects the Jenkins Koji Plugin, where credentials are stored unencrypted in the global configuration file on the Jenkins master (org.jenkinsci.plugins.koji.KojiBuilder.xml). This file is accessible to users with filesystem access to the Jenkins controller, enabling una...

CVE-2019-10298

Jenkins Koji Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

PT-2019-11700 · Jenkins · Jenkins Koji Plugin

Name of the Vulnerable Software and Affected Versions: Jenkins Koji Plugin affected versions not specified Description: The issue concerns the storage of credentials in an unencrypted manner within the global configuration file on the Jenkins master or controller. Specifically, credentials are...

CVE-2019-10298: Insufficiently Protected Credentials

Jenkins Koji Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...