GHSA-4p59-p85x-f3wx

Source

https://github.com/advisories/GHSA-4p59-p85x-f3wx

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-4p59-p85x-f3wx/GHSA-4p59-p85x-f3wx.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-4p59-p85x-f3wx

Aliases

CVE-2019-10453

Published

2022-05-24T16:58:50Z

Modified

2023-11-08T04:00:52Z

Severity

7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

Jenkins Delphix Plugin vulnerable to Cleartext credential storage

Details

Jenkins Delphix Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.

Database specific

{
    "cwe_ids":  [
        "CWE-312"
    ],
    "github_reviewed":  true,
    "github_reviewed_at":  "2022-12-06T21:57:01Z",
    "nvd_published_at":  "2019-10-16T14:15:00Z",
    "severity":  "HIGH"
}

References

Affected packages

Maven / org.jenkins-ci.plugins:delphix

Package

Name: org.jenkins-ci.plugins:delphix; View open source insights on deps.dev
Purl: pkg:maven/org.jenkins-ci.plugins/delphix

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Last Affected

2.0.4

Affected versions

1.*

1.0.0

1.0.1

1.0.2

1.0.3

1.0.4

1.0.5

1.0.6

1.0.7

1.0.8

2.*

2.0.0

2.0.1

2.0.2

2.0.3

2.0.4

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-4p59-p85x-f3wx/GHSA-4p59-p85x-f3wx.json"