CVE-2019-10450

Summary

Jenkins ElasticBox CI Plugin stores credentials unencrypted in the global config.xml configuration file on the Jenkins master where they can be viewed by users with access to the master file system.

Affected Software

VendorProductVersion RangeStatus
Jenkins projectJenkins ElasticBox CI Plugin5.0.1 and earlieraffected

Weaknesses

ADP Enrichment

CVE Program Container

Additional References

References