CVE-2019-10398

CWE-522 — Insufficiently Protected Credentials5 documents5 sources
Severity
5.5MEDIUM
EPSS
0.0%
top 98.64%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Jenkins Beaker BuilderJenkins Project Jenkins Beaker Builder Plugin
Timeline
PublishedSep 12
Latest updateMay 24

Description

Jenkins Beaker Builder Plugin 1.9 and earlier stored credentials unencrypted in its global configuration file on the Jenkins master where they could be viewed by users with access to the master file system.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 1.8 | Impact: 3.6

Affected Packages3 packages

🔴Vulnerability Details

3
OSV
Jenkins Beaker Builder Plugin has Insufficiently Protected Credentials↗2022-05-24
▶
GHSA
Jenkins Beaker Builder Plugin has Insufficiently Protected Credentials↗2022-05-24
▶
CVEList
CVE-2019-10398: Jenkins Beaker Builder Plugin 1↗2019-09-12
▶

📋Vendor Advisories

1
Jenkins
Jenkins Security Advisory 2019-09-12↗2019-09-12
▶
CVE-2019-10398 (MEDIUM CVSS 5.5) | Jenkins Beaker Builder Plugin 1.9 a | cvebase.io