CVE-2019-1003063

CVE-2019-1003063 affects the Jenkins Amazon SNS Build Notifier Plugin. The vulnerability arises because the plugin stores credentials unencrypted in the global configuration file on the Jenkins master, specifically in the org.jenkinsci.plugins.snsnotify.AmazonSNSNotifier.xml, which can be viewed ...

CVE-2019-1003072

Jenkins WildFly Deployer Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

CVE-2019-1003073

Jenkins VS Team Services Continuous Deployment Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

CVE-2019-1003061

Jenkins jenkins-cloudformation-plugin Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

CVE-2019-1003056

Jenkins WebSphere Deployer Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

CVE-2019-1003067

Jenkins Trac Publisher Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

CVE-2019-1003070

Jenkins veracode-scanner Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

CVE-2019-1003068

Jenkins VMware vRealize Automation Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

CVE-2019-1003073

The CVE-2019-1003073 entry concerns Jenkins VS Team Services Continuous Deployment Plugin. According to the provided documents, credentials are stored unencrypted in job config.xml files on the Jenkins master/controller. This allows exposure to users with Extended Read permission or anyone with a...

CVE-2019-1003065

Jenkins CloudShare Docker-Machine Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

CVE-2019-1003053

Jenkins HockeyApp Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

CVE-2019-1003055

Jenkins FTP publisher Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

CVE-2019-1003055

Jenkins FTP publisher Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

CVE-2019-1003055

CVE-2019-1003055 concerns the Jenkins FTP publisher Plugin, where credentials are stored unencrypted in the global configuration file on the Jenkins master (com.zanox.hudson.plugins.FTPPublisher.xml). This design allows users with master filesystem access to view credentials. Public details consi...

CVE-2019-1003054

CVE-2019-1003054 relates to the Jenkins Jira Issue Updater Plugin, where credentials are stored unencrypted in job config.xml on the Jenkins master/controller. The vulnerability arises from credentials being accessible to any user with Extended Read permission or with access to the master/control...

CVE-2019-1003053

The CVE-2019-1003053 entry concerns the Jenkins HockeyApp Plugin, where credentials are stored in plaintext in job config.xml files on the Jenkins master. The underlying issue is improper credential handling in the plugin, making secrets viewable to users with Extended Read permission or anyone w...

CVE-2019-1003052

Jenkins AWS Elastic Beanstalk Publisher Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

CVE-2019-1003052

CVE-2019-1003052 affects the Jenkins AWS Elastic Beanstalk Publisher Plugin. The credential data is stored in plaintext in the plugin’s global configuration file on the Jenkins master/controller (org.jenkinsci.plugins.awsbeanstalkpublisher.AWSEBPublisher.xml), allowing any user with master filesy...

CVE-2019-1003051

Jenkins IRC Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

CVE-2019-1003053

Jenkins HockeyApp Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...