CVE-2019-1003070

Jenkins veracode-scanner Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

CVE-2019-1003062

Jenkins AWS CloudWatch Logs Publisher Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

CVE-2019-1003064

Jenkins aws-device-farm Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

CVE-2019-1003074

Jenkins Hyper.sh Commons Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

CVE-2019-1003066

Jenkins Bugzilla Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

CVE-2019-1003069

The CVE CVE-2019-1003069 affects the Jenkins Aqua Security Scanner Plugin. Affected component: credentials stored unencrypted in the plugin’s global configuration on the Jenkins master, specifically in org.jenkinsci.plugins.aquadockerscannerbuildstep.AquaDockerScannerBuilder.xml. Root cause: cred...

CVE-2019-1003063

Jenkins Amazon SNS Build Notifier Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

CVE-2019-1003064

Jenkins aws-device-farm Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

CVE-2019-1003069

Jenkins Aqua Security Scanner Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

CVE-2019-1003071

Jenkins OctopusDeploy Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

CVE-2019-1003065

CVE-2019-1003065 affects the Jenkins CloudShare Docker-Machine Plugin. The issue is that credentials are stored in plaintext in the plugin’s global configuration file on the Jenkins master/controller, specifically in the file com.cloudshare.jenkins.CloudShareConfiguration.xml. This allows users w...

CVE-2019-1003063

Jenkins Amazon SNS Build Notifier Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

CVE-2019-1003072

The CVE-2019-1003072 entry concerns the Jenkins WildFly Deployer Plugin which stores credentials unencrypted in job config.xml files on the Jenkins master. This exposure allows viewing by users with Extended Read permission or anyone with access to the master file system. Connected documents corr...

CVE-2019-1003070

The CVE-2019-1003070 case affects the Jenkins veracode-scanner Plugin, where credentials are stored unencrypted in the plugin’s global configuration file on the Jenkins master. The root cause is unencrypted credential storage in VeracodeNotifier.xml, making sensitive data viewable by anyone with ...

CVE-2019-1003064

The CVE-2019-1003064 issue affects the Jenkins aws-device-farm Plugin, where credentials are stored in plaintext in the plugin’s global configuration file (org.jenkinsci.plugins.awsdevicefarm.AWSDeviceFarmRecorder.xml) on the Jenkins controller. This unencrypted storage enables users with access ...

CVE-2019-1003066

CVE-2019-1003066 affects the Jenkins Bugzilla Plugin. The issue is that credentials are stored unencrypted in the plugin’s global configuration file on the Jenkins master, specifically in hudson.plugins.bugzilla.BugzillaProjectProperty.xml, and can be viewed by any user with access to the master ...

CVE-2019-1003069

Jenkins Aqua Security Scanner Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

CVE-2019-1003065

Jenkins CloudShare Docker-Machine Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

CVE-2019-1003056

Jenkins WebSphere Deployer Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

CVE-2019-1003067

CVE-2019-1003067 describes a credential exposure in the Jenkins Trac Publisher Plugin where credentials are stored in plaintext in job config.xml on the Jenkins master/controller. The root cause is unencrypted credential storage in the plugin’s configuration files, making credentials viewable by ...