CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2019-10422

Jenkins Call Remote Job Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 20.7%

CVSS Severity

CVSS v3 Score 6.5

CVSS v2 Score 4.0

References

http://www.openwall.com/lists/oss-security/2019/09/25/3
https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1548
http://www.openwall.com/lists/oss-security/2019/09/25/3
https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1548

Products affected by CVE-2019-10422

Jenkins » Call Remote Job » Version: 1.0.12

cpe:2.3:a:jenkins:call_remote_job:1.0.12
Jenkins » Call Remote Job » Version: 1.0.16

cpe:2.3:a:jenkins:call_remote_job:1.0.16
Jenkins » Call Remote Job » Version: 1.0.18

cpe:2.3:a:jenkins:call_remote_job:1.0.18
Jenkins » Call Remote Job » Version: 1.0.19

cpe:2.3:a:jenkins:call_remote_job:1.0.19
Jenkins » Call Remote Job » Version: 1.0.20

cpe:2.3:a:jenkins:call_remote_job:1.0.20
Jenkins » Call Remote Job » Version: 1.0.21

cpe:2.3:a:jenkins:call_remote_job:1.0.21

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-10422

Products

Pricing

Contact Us