CVE-2019-10428

CWE-319 — Cleartext Transmission5 documents5 sources
Severity
7.5HIGH
EPSS
0.0%
top 84.74%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Jenkins Aqua Security ScannerJenkins Project Jenkins Aqua Security Scanner Plugin
Timeline
PublishedSep 25
Latest updateMay 24

Description

Jenkins Aqua Security Scanner Plugin 3.0.17 and earlier transmitted configured credentials in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages3 packages

🔴Vulnerability Details

3
OSV
Jenkins Aqua Security Scanner Plugin showed plain text password in configuration form↗2022-05-24
▶
GHSA
Jenkins Aqua Security Scanner Plugin showed plain text password in configuration form↗2022-05-24
▶
CVEList
CVE-2019-10428: Jenkins Aqua Security Scanner Plugin 3↗2019-09-25
▶

📋Vendor Advisories

1
Jenkins
Jenkins Security Advisory 2019-09-25↗2019-09-25
▶
CVE-2019-10428 (HIGH CVSS 7.5) | Jenkins Aqua Security Scanner Plugi | cvebase.io