GHSA-jrmf-xhr6-3428
Suggest an improvement- Source
- https://github.com/advisories/GHSA-jrmf-xhr6-3428
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-jrmf-xhr6-3428/GHSA-jrmf-xhr6-3428.json
- JSON Data
- https://api.osv.dev/v1/vulns/GHSA-jrmf-xhr6-3428
- Aliases
-
- CVE-2019-10435
- Published
- 2022-05-24T16:57:28Z
- Modified
- 2023-11-08T04:00:51.295750Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
- Summary
- Jenkins SourceGear Vault plugin transmits credentials in plain text
- Details
-
Jenkins SourceGear Vault Plugin transmits configured credentials in plain text as part of job configuration forms, potentially resulting in their exposure. As of the publication of the advisory, there are no patches and the plugin is unmaintained.
- Database specific
{ "nvd_published_at": "2019-10-01T14:15:00Z", "github_reviewed_at": "2022-12-06T21:07:51Z", "severity": "HIGH", "github_reviewed": true, "cwe_ids": [ "CWE-319" ] }- References
Affected packages
Maven / org.jenkins-ci.plugins:vault-scm-plugin
Package
- Name
- org.jenkins-ci.plugins:vault-scm-plugin
- View open source insights on deps.dev
- Purl
- pkg:maven/org.jenkins-ci.plugins/vault-scm-plugin