CVE-2019-10288

Jenkins Jabber Server Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

CVE-2019-10294

CVE-2019-10294 concerns the Jenkins Kmap Plugin, where credentials are stored unencrypted in job config.xml files on the Jenkins master. The underlying issue enables exposure to users with Extended Read permission or with access to the master filesystem. The initial entry and multiple connected a...

CVE-2019-10291

Summary (concrete details): CVE-2019-10291 concerns the Jenkins Netsparker Cloud Scan Plugin (version 1.1.5 and older) which stored credentials in plaintext in the Jenkins master/global configuration file, exposing them to anyone with file-system access. Related connected data show the Enterprise...

CVE-2019-10282

Jenkins Klaros-Testmanagement Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

CVE-2019-10281

Jenkins Relution Enterprise Appstore Publisher Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

CVE-2019-1003094

The CVE-2019-1003094 entry concerns the Jenkins Open STF Plugin, where credentials are stored unencrypted in the plugin’s global configuration file on the Jenkins master. The vulnerability arises from plaintext storage, allowing users with access to the master filesystem to view sensitive credent...

CVE-2019-1003088

Jenkins Fabric Beta Publisher Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

CVE-2019-10284

Jenkins Diawi Upload Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

CVE-2019-1003097

CVE-2019-1003097 affects the Jenkins Crowd Integration Plugin, where credentials are stored unencrypted in the global config.xml on the Jenkins master. This allows users with access to the master file system to view sensitive data. The available connected documents confirm the affected component ...

CVE-2019-10284

CVE-2019-10284 affects the Jenkins Diawi Upload Plugin. The vulnerability is the storage of credentials in plain text within job config.xml files on the Jenkins master/controller, enabling exposure to users with Extended Read permissions or with access to the master filesystem. The connected docu...

CVE-2019-10286

Jenkins DeployHub Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

CVE-2019-10284

Jenkins Diawi Upload Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

CVE-2019-1003095

CVE-2019-1003095 affects the Jenkins Perfecto Mobile Plugin, where credentials are stored in plaintext in the plugin’s global configuration file on the Jenkins master and can be viewed by users with master-file-system access. This creates a confidentiality risk per cited sources. The connected do...

CVE-2019-1003095

Jenkins Perfecto Mobile Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

CVE-2019-10283

Jenkins mabl Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

CVE-2019-10277

Jenkins StarTeam Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

CVE-2019-1003096

Jenkins TestFairy Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

CVE-2019-1003088

The CVE-2019-1003088 entry concerns Jenkins Fabric Beta Publisher Plugin. The provided documents indicate that the plugin stores credentials unencrypted in job config.xml files on the Jenkins master, allowing credential access by users with Extended Read permission or anyone with access to the ma...

CVE-2019-10286

The CVE-2019-10286 issue concerns the Jenkins DeployHub Plugin storing credentials in plaintext in job config.xml files on the Jenkins master/controller. This can allow users with Extended Read permission or users with filesystem access to view sensitive credentials. The Connected documents confi...

CVE-2019-10283

The CVE-2019-10283 entry relates to the Jenkins mabl Plugin storing credentials unencrypted in job config.xml files on the Jenkins master/controller, allowing access by users with Extended Read permission or direct master access. This vulnerability is consistently described across multiple source...