CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2019-10435

Jenkins SourceGear Vault Plugin transmits configured credentials in plain text as part of job configuration forms, potentially resulting in their exposure.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 20.2%

CVSS Severity

CVSS v3 Score 7.5

CVSS v2 Score 5.0

References

http://www.openwall.com/lists/oss-security/2019/10/01/2
https://jenkins.io/security/advisory/2019-10-01/#SECURITY-1524
http://www.openwall.com/lists/oss-security/2019/10/01/2
https://jenkins.io/security/advisory/2019-10-01/#SECURITY-1524

Products affected by CVE-2019-10435

Jenkins » Sourcegear Vault » Version: N/A

cpe:2.3:a:jenkins:sourcegear_vault:-
Jenkins » Sourcegear Vault » Version: 1.0

cpe:2.3:a:jenkins:sourcegear_vault:1.0
Jenkins » Sourcegear Vault » Version: 1.1

cpe:2.3:a:jenkins:sourcegear_vault:1.1
Jenkins » Sourcegear Vault » Version: 1.1.1

cpe:2.3:a:jenkins:sourcegear_vault:1.1.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-10435

Products

Pricing

Contact Us