CVE-2019-10425

The CVE-2019-10425 entry concerns the Jenkins Google Calendar Plugin, where credentials are stored unencrypted in job config.xml files on the Jenkins master. The underlying issue allows users with Extended Read permission or with access to the master file system to view these credentials. The ava...