CVE-2019-10452

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2019-10452

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-10452.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2019-10452

Aliases

GHSA-5rc5-4c5c-4cwx

Published

2019-10-16T14:15:13.120Z

Modified

2026-03-14T09:30:52.386860Z

Severity

4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVSS Calculator

Summary

[none]

Details

Jenkins View26 Test-Reporting Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.

References

https://jenkins.io/security/advisory/2019-10-16/#SECURITY-1440

Affected packages

Git /

Affected ranges

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-10452.json"

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.0.7"
            }
        ]
    }
]