CVE-2019-10361

Sažetak

Jenkins Maven Release Plugin 0.14.0 and earlier stored credentials unencrypted on the Jenkins master where they could be viewed by users with access to the master file system.

Reference

https://jenkins.io/security/advisory/2019-07-31/#SECURITY-1435
http://www.openwall.com/lists/oss-security/2019/07/31/1
https://www.zerodayinitiative.com/advisories/ZDI-19-835/

CVSS

Base:	2.1
Impact:	2.9
Exploitability:	3.9

Pristup

Vektor	Složenost	Autentikacija
LOCAL	LOW	NONE

Impact

Povjerljivost	Cjelovitost	Dostupnost
PARTIAL	NONE	NONE

CVSS vektor

AV:L/AC:L/Au:N/C:P/I:N/A:N

Zadnje važnije ažuriranje

25-10-2023 - 18:16

Objavljeno

31-07-2019 - 13:15