Jenkins Credentials Binding Plugin Stores Passwords in a Recoverable Format

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2019-1010241 · ADVISORY
• docs.google.com/document/d/1MBEoJSMvkjp5Kua0bRD_kiDBisL0fOCwTL9uMWj4lGA/edit · WEB
• jenkinsci/credentials-binding-plugin · PACKAGE
• web.archive.org/web/20200227030005/https://www.securityfocus.com/bid/109320 · WEB
• securityfocus.com/bid/109320 · Third Party Advisory

org.jenkins-ci.plugins:credentials-binding のその他の脆弱性

• CVE-2026-48922高 7.5Jenkins Credentials Binding Plugin 720.v3f6decef43ea_ and earlier does not properly sanitize file names for file and zip file credentials, a…
• CVE-2026-42520高 7.5Jenkins Credentials Binding Plugin 719.v80e905ef14eb_ and earlier does not sanitize file names for file and zip file credentials, allowing a…
• CVE-2025-53650高 7.3Jenkins Credentials Binding Plugin 687.v619cb_15e923f and earlier does not properly mask (i.e., replace with asterisks) credentials present …
• CVE-2022-20616中 4.3Jenkins Credentials Binding Plugin 1.27 and earlier does not perform a permission check in a method implementing form validation, allowing a…
• CVE-2020-2182中 4.3Jenkins Credentials Binding Plugin 1.22 and earlier does not mask (i.e., replace with asterisks) secrets containing a `$` character in some …