CVE-2019-10303

Summary

Jenkins Azure PublisherSettings Credentials Plugin 1.2 and earlier stored credentials unencrypted in the credentials.xml file on the Jenkins master where they could be viewed by users with access to the master file system.

Affected Software

VendorProductVersion RangeStatus
Jenkins projectJenkins Azure PublisherSettings Credentials Plugin1.2 and earlieraffected

Weaknesses

ADP Enrichment

CVE Program Container

Additional References

References