En bref
- CVE-2019-10398 est une vulnérabilité MOYENNE (CVSS 5.5) touchant org.jenkins-ci.plugins:beaker-builder, beaker builder (jenkins).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.29%, plus élevée que 21.8% des vulnérabilités.
- Correctif : mettre à jour vers 1.10 ou plus récent.
Description
Beaker builder Plugin stored the Beaker password unencrypted on the Jenkins controller. This password could be viewed by users with access to the Jenkins controller file system.
Beaker builder Plugin now stores these credentials encrypted.
NVD description
Jenkins Beaker Builder Plugin 1.9 and earlier stored credentials unencrypted in its global configuration file on the Jenkins master where they could be viewed by users with access to the master file system.
Autres vulnérabilités de org.jenkins-ci.plugins:beaker-builder
Tout voir →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free