QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2019-10284

Back to search

CVE-2019-10284

Published: Apr 4, 2019

Modified: Aug 4, 2024

PUBLISHED

Description

Jenkins Diawi Upload Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.

VendorProductVersions

Jenkins project

Jenkins Diawi Upload Plugin

affected
all versions as of 2019-04-03

References

107790
vdb-entry
x_refsource_BID

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now