CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-10414

Jenkins Git Changelog Plugin 2.17 and earlier stored credentials unencrypted in job config.xml files on the Jenkins master where they could be viewed by users with Extended Read permission, or access to the master file system.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 20.5%

CVSS Severity

CVSS v3 Score 6.5

CVSS v2 Score 3.5

References

Products affected by CVE-2019-10414

Jenkins » Git Changelog » Version: N/A

cpe:2.3:a:jenkins:git_changelog:-
Jenkins » Git Changelog » Version: 1.0

cpe:2.3:a:jenkins:git_changelog:1.0
Jenkins » Git Changelog » Version: 1.1

cpe:2.3:a:jenkins:git_changelog:1.1
Jenkins » Git Changelog » Version: 1.10

cpe:2.3:a:jenkins:git_changelog:1.10
Jenkins » Git Changelog » Version: 1.11

cpe:2.3:a:jenkins:git_changelog:1.11
Jenkins » Git Changelog » Version: 1.12

cpe:2.3:a:jenkins:git_changelog:1.12
Jenkins » Git Changelog » Version: 1.13

cpe:2.3:a:jenkins:git_changelog:1.13
Jenkins » Git Changelog » Version: 1.14

cpe:2.3:a:jenkins:git_changelog:1.14
Jenkins » Git Changelog » Version: 1.15

cpe:2.3:a:jenkins:git_changelog:1.15
Jenkins » Git Changelog » Version: 1.16

cpe:2.3:a:jenkins:git_changelog:1.16
Jenkins » Git Changelog » Version: 1.17

cpe:2.3:a:jenkins:git_changelog:1.17
Jenkins » Git Changelog » Version: 1.18

cpe:2.3:a:jenkins:git_changelog:1.18
Jenkins » Git Changelog » Version: 1.19

cpe:2.3:a:jenkins:git_changelog:1.19
Jenkins » Git Changelog » Version: 1.2

cpe:2.3:a:jenkins:git_changelog:1.2
Jenkins » Git Changelog » Version: 1.21

cpe:2.3:a:jenkins:git_changelog:1.21
Jenkins » Git Changelog » Version: 1.22

cpe:2.3:a:jenkins:git_changelog:1.22
Jenkins » Git Changelog » Version: 1.23

cpe:2.3:a:jenkins:git_changelog:1.23
Jenkins » Git Changelog » Version: 1.24

cpe:2.3:a:jenkins:git_changelog:1.24
Jenkins » Git Changelog » Version: 1.25

cpe:2.3:a:jenkins:git_changelog:1.25
Jenkins » Git Changelog » Version: 1.26

cpe:2.3:a:jenkins:git_changelog:1.26
Jenkins » Git Changelog » Version: 1.27

cpe:2.3:a:jenkins:git_changelog:1.27
Jenkins » Git Changelog » Version: 1.28

cpe:2.3:a:jenkins:git_changelog:1.28
Jenkins » Git Changelog » Version: 1.29

cpe:2.3:a:jenkins:git_changelog:1.29
Jenkins » Git Changelog » Version: 1.3

cpe:2.3:a:jenkins:git_changelog:1.3
Jenkins » Git Changelog » Version: 1.31

cpe:2.3:a:jenkins:git_changelog:1.31
Jenkins » Git Changelog » Version: 1.32

cpe:2.3:a:jenkins:git_changelog:1.32
Jenkins » Git Changelog » Version: 1.33

cpe:2.3:a:jenkins:git_changelog:1.33
Jenkins » Git Changelog » Version: 1.34

cpe:2.3:a:jenkins:git_changelog:1.34
Jenkins » Git Changelog » Version: 1.35

cpe:2.3:a:jenkins:git_changelog:1.35
Jenkins » Git Changelog » Version: 1.36

cpe:2.3:a:jenkins:git_changelog:1.36
Jenkins » Git Changelog » Version: 1.37

cpe:2.3:a:jenkins:git_changelog:1.37
Jenkins » Git Changelog » Version: 1.38

cpe:2.3:a:jenkins:git_changelog:1.38
Jenkins » Git Changelog » Version: 1.39

cpe:2.3:a:jenkins:git_changelog:1.39
Jenkins » Git Changelog » Version: 1.4

cpe:2.3:a:jenkins:git_changelog:1.4
Jenkins » Git Changelog » Version: 1.41

cpe:2.3:a:jenkins:git_changelog:1.41
Jenkins » Git Changelog » Version: 1.42

cpe:2.3:a:jenkins:git_changelog:1.42
Jenkins » Git Changelog » Version: 1.43

cpe:2.3:a:jenkins:git_changelog:1.43
Jenkins » Git Changelog » Version: 1.44

cpe:2.3:a:jenkins:git_changelog:1.44
Jenkins » Git Changelog » Version: 1.45

cpe:2.3:a:jenkins:git_changelog:1.45
Jenkins » Git Changelog » Version: 1.46

cpe:2.3:a:jenkins:git_changelog:1.46
Jenkins » Git Changelog » Version: 1.47

cpe:2.3:a:jenkins:git_changelog:1.47
Jenkins » Git Changelog » Version: 1.48

cpe:2.3:a:jenkins:git_changelog:1.48
Jenkins » Git Changelog » Version: 1.49

cpe:2.3:a:jenkins:git_changelog:1.49
Jenkins » Git Changelog » Version: 1.5

cpe:2.3:a:jenkins:git_changelog:1.5
Jenkins » Git Changelog » Version: 1.50

cpe:2.3:a:jenkins:git_changelog:1.50
Jenkins » Git Changelog » Version: 1.51

cpe:2.3:a:jenkins:git_changelog:1.51
Jenkins » Git Changelog » Version: 1.52

cpe:2.3:a:jenkins:git_changelog:1.52
Jenkins » Git Changelog » Version: 1.53

cpe:2.3:a:jenkins:git_changelog:1.53
Jenkins » Git Changelog » Version: 1.54

cpe:2.3:a:jenkins:git_changelog:1.54
Jenkins » Git Changelog » Version: 1.55

cpe:2.3:a:jenkins:git_changelog:1.55
Jenkins » Git Changelog » Version: 1.56

cpe:2.3:a:jenkins:git_changelog:1.56
Jenkins » Git Changelog » Version: 1.57

cpe:2.3:a:jenkins:git_changelog:1.57
Jenkins » Git Changelog » Version: 1.6

cpe:2.3:a:jenkins:git_changelog:1.6
Jenkins » Git Changelog » Version: 1.7

cpe:2.3:a:jenkins:git_changelog:1.7
Jenkins » Git Changelog » Version: 1.8

cpe:2.3:a:jenkins:git_changelog:1.8
Jenkins » Git Changelog » Version: 1.9

cpe:2.3:a:jenkins:git_changelog:1.9
Jenkins » Git Changelog » Version: 2.0

cpe:2.3:a:jenkins:git_changelog:2.0
Jenkins » Git Changelog » Version: 2.1

cpe:2.3:a:jenkins:git_changelog:2.1
Jenkins » Git Changelog » Version: 2.10

cpe:2.3:a:jenkins:git_changelog:2.10
Jenkins » Git Changelog » Version: 2.11

cpe:2.3:a:jenkins:git_changelog:2.11
Jenkins » Git Changelog » Version: 2.12

cpe:2.3:a:jenkins:git_changelog:2.12
Jenkins » Git Changelog » Version: 2.13

cpe:2.3:a:jenkins:git_changelog:2.13
Jenkins » Git Changelog » Version: 2.14

cpe:2.3:a:jenkins:git_changelog:2.14
Jenkins » Git Changelog » Version: 2.15

cpe:2.3:a:jenkins:git_changelog:2.15
Jenkins » Git Changelog » Version: 2.16

cpe:2.3:a:jenkins:git_changelog:2.16
Jenkins » Git Changelog » Version: 2.17

cpe:2.3:a:jenkins:git_changelog:2.17
Jenkins » Git Changelog » Version: 2.2

cpe:2.3:a:jenkins:git_changelog:2.2
Jenkins » Git Changelog » Version: 2.3

cpe:2.3:a:jenkins:git_changelog:2.3
Jenkins » Git Changelog » Version: 2.4

cpe:2.3:a:jenkins:git_changelog:2.4
Jenkins » Git Changelog » Version: 2.5

cpe:2.3:a:jenkins:git_changelog:2.5
Jenkins » Git Changelog » Version: 2.6

cpe:2.3:a:jenkins:git_changelog:2.6
Jenkins » Git Changelog » Version: 2.7

cpe:2.3:a:jenkins:git_changelog:2.7
Jenkins » Git Changelog » Version: 2.8

cpe:2.3:a:jenkins:git_changelog:2.8
Jenkins » Git Changelog » Version: 2.9

cpe:2.3:a:jenkins:git_changelog:2.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-10414

Products

Pricing

Contact Us