| Package | Affected versions | Patched versions |
|---|---|---|
| org.jenkins-ci.plugins:subversion | < 1.54 | 1.54 |
| subversion-plugin | = 1.0= 1.1= 1.10= 1.11= 1.12= 1.13= 1.14= 1.15= 1.16= 1.17= 1.18= 1.19= 1.2= 1.20= 1.21= 1.22= 1.23= 1.24= 1.25= 1.26= 1.27= 1.28= 1.29= 1.3= 1.30= 1.31= 1.32= 1.33= 1.34= 1.35= 1.36= 1.37= 1.38= 1.39= 1.4= 1.40= 1.41= 1.42= 1.43= 1.44= 1.45= 1.46= 1.47= 1.48= 1.49= 1.5= 1.50= 1.51= 1.52= 1.6= 1.7= 1.8= 1.9≤ 1.53 |
The Subversion plugin before 1.54 for Jenkins stores credentials using base64 encoding, which allows local users to obtain passwords and SSH private keys by reading a subversion.credentials file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free