CVE-2019-1003048

Summary

A vulnerability in Jenkins PRQA Plugin 3.1.0 and earlier allows attackers with local file system access to the Jenkins home directory to obtain the unencrypted password from the plugin configuration.

Affected Software

Weaknesses

ADP Enrichment

CVE Program Container

Additional References

• http://www.openwall.com/lists/oss-security/2019/03/28/2
• http://www.securityfocus.com/bid/107628
• https://jenkins.io/security/advisory/2019-03-25/#SECURITY-1089

References

• http://www.openwall.com/lists/oss-security/2019/03/28/2
• http://www.securityfocus.com/bid/107628
• https://jenkins.io/security/advisory/2019-03-25/#SECURITY-1089

• ←Previous
• Next→