En bref
- CVE-2019-10430 est une vulnérabilité MOYENNE (CVSS 5.5) touchant io.jenkins.plugins:neuvector-vulnerability-scanner, neuvector vulnerability scanner (jenkins).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.25%, plus élevée que 16.8% des vulnérabilités.
- Correctif : mettre à jour vers 1.6 ou plus récent.
Description
Jenkins NeuVector Vulnerability Scanner Plugin 1.5 and earlier stored credentials unencrypted in its global configuration file on the Jenkins master where they could be viewed by users with access to the master file system.
NVD description
Jenkins NeuVector Vulnerability Scanner Plugin 1.5 and earlier stored credentials unencrypted in its global configuration file on the Jenkins master where they could be viewed by users with access to the master file system.
Autres vulnérabilités de io.jenkins.plugins:neuvector-vulnerability-scanner
Tout voir →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free