CVE-2019-10430

MEDIUM5.5EPSS 0.01%

Jenkins NeuVector Vulnerability Scanner Plugin stored credentials in plain text

Published: 5/24/2022Modified: 2/16/2024

Description

Jenkins NeuVector Vulnerability Scanner Plugin 1.5 and earlier stored credentials unencrypted in its global configuration file on the Jenkins master where they could be viewed by users with access to the master file system.

Affected packages (1)

Maven/io.jenkins.plugins:neuvector-vulnerability-scannerfrom 0, < 1.6

CVSS scores

Source	Version	Severity	Vector
osv	CVSS 3.1	MEDIUM5.5	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

References (3)

ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2019-10430
WEBhttps://jenkins.io/security/advisory/2019-09-25/#SECURITY-1504
WEBhttp://www.openwall.com/lists/oss-security/2019/09/25/3