GHSA-3fpx-g9h3-hh8x

ghsaUSosv

Jenkins NeuVector Vulnerability Scanner Plugin stored credentials in plain text

view advisory published 2022-05-24Licence: CC-BY-4.0

Jenkins NeuVector Vulnerability Scanner Plugin 1.5 and earlier stored credentials unencrypted in its global configuration file on the Jenkins master where they could be viewed by users with access to the master file system.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2019-10430US	medium5.5OT elevated	0.25% (17th)	—	2019-09-25
Jenkins NeuVector Vulnerability Scanner Plugin 1.5 and earlier stored credentials unencrypted in its global configuration file on the Jenkins master where they could be viewed by u…

references

External citations — patches, advisories, analysis.

http://www.openwall.com/lists/oss-security/2019/09/25/3WEB
https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1504WEB
https://nvd.nist.gov/vuln/detail/CVE-2019-10430ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan