Em resumo
- CVE-2019-10460 é uma vulnerabilidade ALTO (CVSS 7.8) que afeta org.jenkins-ci.plugins:bitbucket-oauth, bitbucket oauth (jenkins).
- Chance de exploração nos próximos 30 dias (EPSS): 0.33%, maior que 26.7% das vulnerabilidades.
- Correção: atualize para 0.10 ou posterior.
Description
Jenkins Bitbucket OAuth Plugin prior to 0.10 stores credentials unencrypted in the global config.xml configuration file on the Jenkins master where they could be viewed by users with access to the master file system.
NVD description
Jenkins Bitbucket OAuth Plugin 0.9 and earlier stored credentials unencrypted in the global config.xml configuration file on the Jenkins master where they could be viewed by users with access to the master file system.
Mais vulnerabilidades de org.jenkins-ci.plugins:bitbucket-oauth
Ver tudo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free