CVE-2019-10297

CVE-2019-10297 affects the Jenkins Sametime Plugin. The vulnerability arises because credentials are stored unencrypted in the plugin’s global configuration on the Jenkins master, specifically within hudson.plugins.sametime.im.transport.SametimePublisher.xml, and can be read by anyone with access...