CVE-2019-10282

CVE-2019-10282 affects the Jenkins Klaros-Testmanagement Plugin. The issue is that credentials are stored unencrypted in job config.xml files on the Jenkins master/controller, allowing users with Extended Read permission or access to the master/file system to view them. The public descriptions in...

CVE-2019-10285

Affected software : Jenkins Minio Storage Plugin. Vulnerability : credentials are stored unencrypted in the global configuration file on the Jenkins master, specifically in org.jenkinsci.plugins.minio.MinioUploader.xml. Root cause : lack of encryption for stored credentials in the plugin’s config...

CVE-2019-10277

Jenkins StarTeam Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

CVE-2019-10285

Jenkins Minio Storage Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

CVE-2019-1003097

Jenkins Crowd Integration Plugin stores credentials unencrypted in the global config.xml configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

CVE-2019-10286

Jenkins DeployHub Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

CVE-2019-10285

Jenkins Minio Storage Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

CVE-2019-1003094

Jenkins Open STF Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

CVE-2019-10280

CVE-2019-10280 affects the Jenkins Assembla Auth Plugin. The issue is that credentials are stored unencrypted in the global config.xml on the Jenkins master, allowing access to those credentials by users who can access the master filesystem. The connected documents confirm the vulnerable storage ...

CVE-2019-1003089

Summary (CVE-2019-1003089) : The issue concerns the Jenkins Upload to pgyer Plugin, where credentials are stored unencrypted in job config.xml files on the Jenkins master. The root cause is unencrypted credential storage in the plugin’s configuration, allowing disclosure to users with Extended Re...

CVE-2019-10277

CVE-2019-10277 affects the Jenkins StarTeam Plugin. The vulnerability arises because credentials are stored unencrypted in job config.xmls on the Jenkins master, enabling exposure to users with Extended Read permission or anyone with master filesystem access. Impact: confidentiality and integrity...

CVE-2019-1003096

CVE-2019-1003096 affects the Jenkins TestFairy Plugin, where credentials are stored unencrypted in job config.xml files on the Jenkins master. The underlying issue is unencrypted credential storage, allowing access by users with Extended Read permission or anyone with access to the master filesys...

CVE-2019-10281

Jenkins Relution Enterprise Appstore Publisher Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

CVE-2019-10283

Jenkins mabl Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

CVE-2019-10282

Jenkins Klaros-Testmanagement Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

CVE-2019-10280

Jenkins Assembla Auth Plugin stores credentials unencrypted in the global config.xml configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

CVE-2019-10281

The CVE-2019-10281 issue affects the Jenkins Relution Enterprise Appstore Publisher Plugin, where credentials are stored unencrypted in the plugin’s global configuration file on the Jenkins master. The credential data can be viewed by anyone with access to the master/controller filesystem; the ri...

CVE-2019-1003096

Jenkins TestFairy Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

CVE-2019-1003057

Jenkins Bitbucket Approve Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

CVE-2019-1003061

CVE-2019-1003061 affects the Jenkins ecosystem via the jenkins-cloudformation-plugin, which stores credentials unencrypted in job config.xml files on the Jenkins master/controller. The root cause described across multiple connected records is that credentials are kept in plain text, enabling view...