CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-10413

Jenkins Data Theorem: CI/CD Plugin 1.3 and earlier stored credentials unencrypted in job config.xml files on the Jenkins master where they could be viewed by users with Extended Read permission, or access to the master file system.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 20.7%

CVSS Severity

CVSS v3 Score 6.5

CVSS v2 Score 4.0

References

Products affected by CVE-2019-10413

Jenkins » Data Theorem Mobile App Security » Version: 1.0.1

cpe:2.3:a:jenkins:data_theorem_mobile_app_security:1.0.1
Jenkins » Data Theorem Mobile App Security » Version: 1.0.2

cpe:2.3:a:jenkins:data_theorem_mobile_app_security:1.0.2
Jenkins » Data Theorem Mobile App Security » Version: 1.0.3

cpe:2.3:a:jenkins:data_theorem_mobile_app_security:1.0.3
Jenkins » Data Theorem Mobile App Security » Version: 1.1.0

cpe:2.3:a:jenkins:data_theorem_mobile_app_security:1.1.0
Jenkins » Data Theorem Mobile App Security » Version: 1.2.0

cpe:2.3:a:jenkins:data_theorem_mobile_app_security:1.2.0
Jenkins » Data Theorem Mobile App Security » Version: 1.3

cpe:2.3:a:jenkins:data_theorem_mobile_app_security:1.3

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-10413

Products

Pricing

Contact Us