CVE-2019-10453

See a problem?
Please try reporting it to the source first.

Source

https://nvd.nist.gov/vuln/detail/CVE-2019-10453

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-10453.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2019-10453

Aliases

GHSA-4p59-p85x-f3wx

Published

2019-10-16T14:15:13.213Z

Modified

2025-11-20T10:54:33.832778Z

Severity

7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

Jenkins Delphix Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.

References

Affected packages

Git / github.com/jenkinsci/delphix-plugin

Affected ranges

Type: GIT
Repo: https://github.com/jenkinsci/delphix-plugin
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Last affected

936975544d131e6fadf1bc23b5028efa97013330

Affected versions

delphix-2.*

delphix-2.0.0

delphix-2.0.1

delphix-2.0.2

delphix-2.0.3

delphix-2.0.4

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-10453.json"