Lucene search

Veracode Vulnerability DatabaseVERACODE:20660

HistoryJul 08, 2019 - 12:06 a.m.

Information Disclosure

2019-07-0800:06:46

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.003 Low

EPSS

Percentile

65.1%

JSON

Jenkins Credentials Plugin is vulnerable to information disclosure vulnerability. Users with permission to create or update credentials could use the associated form validation to confirm the existence of files with an attacker-specified path and obtain certificate content of the files containing PKCS#12 certificate.

CPENameOperatorVersion
openshift-enterprise-autohealeq3.11.104__1.git.1.7633569.el7
openshift-enterprise-autohealeq3.11.16__1.git.219.5443970.el7
openshift-enterprise-autohealeq3.10.24__1.git.219.dee8df0.el7
openshift-enterprise-autohealeq3.11.98__1.git.0.6737a19.el7
openshift-enterprise-autohealeq3.11.69__1.git.219.14b59b5.el7
openshift-enterprise-autohealeq3.10.14__1.git.219.d23051d.el7
openshift-enterprise-autohealeq3.11.59__1.git.219.cb7dd44.el7
openshift-enterprise-autohealeq3.11.88__1.git.2.b6f03e9.el7
openshift-enterprise-autohealeq3.11.82__1.git.219.0b5aff4.el7
openshift-enterprise-autohealeq3.11.51__1.git.219.8ea4275.el7

Name	Operator	Version
openshift-enterprise-autoheal	eq	3.11.104__1.git.1.7633569.el7
openshift-enterprise-autoheal	eq	3.11.16__1.git.219.5443970.el7
openshift-enterprise-autoheal	eq	3.10.24__1.git.219.dee8df0.el7
openshift-enterprise-autoheal	eq	3.11.98__1.git.0.6737a19.el7
openshift-enterprise-autoheal	eq	3.11.69__1.git.219.14b59b5.el7
openshift-enterprise-autoheal	eq	3.10.14__1.git.219.d23051d.el7
openshift-enterprise-autoheal	eq	3.11.59__1.git.219.cb7dd44.el7
openshift-enterprise-autoheal	eq	3.11.88__1.git.2.b6f03e9.el7
openshift-enterprise-autoheal	eq	3.11.82__1.git.219.0b5aff4.el7
openshift-enterprise-autoheal	eq	3.11.51__1.git.219.8ea4275.el7

Rows per page:

1-10 of 10261

References

seclists.org/fulldisclosure/2019/May/39

www.openwall.com/lists/oss-security/2019/05/21/1

www.securityfocus.com/bid/108462

access.redhat.com/errata/RHBA-2019:1605

access.redhat.com/security/cve/CVE-2019-1003049

access.redhat.com/security/cve/CVE-2019-1003050

access.redhat.com/security/cve/CVE-2019-10320

access.redhat.com/security/cve/CVE-2019-10328

bugzilla.redhat.com/show_bug.cgi?id=1418021

bugzilla.redhat.com/show_bug.cgi?id=1571190

bugzilla.redhat.com/show_bug.cgi?id=1585070

bugzilla.redhat.com/show_bug.cgi?id=1600741

bugzilla.redhat.com/show_bug.cgi?id=1608260

bugzilla.redhat.com/show_bug.cgi?id=1624316

bugzilla.redhat.com/show_bug.cgi?id=1631687

bugzilla.redhat.com/show_bug.cgi?id=1639427

bugzilla.redhat.com/show_bug.cgi?id=1640382

bugzilla.redhat.com/show_bug.cgi?id=1645656

bugzilla.redhat.com/show_bug.cgi?id=1648973

bugzilla.redhat.com/show_bug.cgi?id=1651564

bugzilla.redhat.com/show_bug.cgi?id=1652746

bugzilla.redhat.com/show_bug.cgi?id=1656083

bugzilla.redhat.com/show_bug.cgi?id=1656487

bugzilla.redhat.com/show_bug.cgi?id=1661076

bugzilla.redhat.com/show_bug.cgi?id=1667063

bugzilla.redhat.com/show_bug.cgi?id=1667801

bugzilla.redhat.com/show_bug.cgi?id=1671315

bugzilla.redhat.com/show_bug.cgi?id=1671837

bugzilla.redhat.com/show_bug.cgi?id=1676399

bugzilla.redhat.com/show_bug.cgi?id=1680059

bugzilla.redhat.com/show_bug.cgi?id=1682924

bugzilla.redhat.com/show_bug.cgi?id=1688250

bugzilla.redhat.com/show_bug.cgi?id=1688318

bugzilla.redhat.com/show_bug.cgi?id=1689230

bugzilla.redhat.com/show_bug.cgi?id=1689796

bugzilla.redhat.com/show_bug.cgi?id=1690066

bugzilla.redhat.com/show_bug.cgi?id=1691023

bugzilla.redhat.com/show_bug.cgi?id=1694724

bugzilla.redhat.com/show_bug.cgi?id=1695903

bugzilla.redhat.com/show_bug.cgi?id=1696249

bugzilla.redhat.com/show_bug.cgi?id=1698018

bugzilla.redhat.com/show_bug.cgi?id=1698922

bugzilla.redhat.com/show_bug.cgi?id=1699533

bugzilla.redhat.com/show_bug.cgi?id=1699696

bugzilla.redhat.com/show_bug.cgi?id=1700875

bugzilla.redhat.com/show_bug.cgi?id=1701806

bugzilla.redhat.com/show_bug.cgi?id=1702544

bugzilla.redhat.com/show_bug.cgi?id=1702693

bugzilla.redhat.com/show_bug.cgi?id=1703136

bugzilla.redhat.com/show_bug.cgi?id=1703558

bugzilla.redhat.com/show_bug.cgi?id=1703749

bugzilla.redhat.com/show_bug.cgi?id=1703904

bugzilla.redhat.com/show_bug.cgi?id=1703947

bugzilla.redhat.com/show_bug.cgi?id=1705243

bugzilla.redhat.com/show_bug.cgi?id=1707448

bugzilla.redhat.com/show_bug.cgi?id=1707524

bugzilla.redhat.com/show_bug.cgi?id=1707799

bugzilla.redhat.com/show_bug.cgi?id=1708187

bugzilla.redhat.com/show_bug.cgi?id=1708442

bugzilla.redhat.com/show_bug.cgi?id=1708552

bugzilla.redhat.com/show_bug.cgi?id=1709254

bugzilla.redhat.com/show_bug.cgi?id=1709626

bugzilla.redhat.com/show_bug.cgi?id=1710424

bugzilla.redhat.com/show_bug.cgi?id=1710723

bugzilla.redhat.com/show_bug.cgi?id=1712488

bugzilla.redhat.com/show_bug.cgi?id=1713211

bugzilla.redhat.com/show_bug.cgi?id=1717028

bugzilla.redhat.com/show_bug.cgi?id=1718458

bugzilla.redhat.com/show_bug.cgi?id=1718542

bugzilla.redhat.com/show_bug.cgi?id=1720466

bugzilla.redhat.com/show_bug.cgi?id=1720581

jenkins.io/security/advisory/2019-05-21/#SECURITY-1322

wwws.nightwatchcybersecurity.com/2019/05/23/exploring-the-file-system-via-jenkins-credentials-plugin-vulnerability-cve-2019-10320/

0.003 Low

EPSS

Percentile

65.1%

JSON

Related for VERACODE:20660