GitHub Advisoryadvisory · Maven

GHSA-4p59-p85x-f3wx Jenkins Delphix Plugin vulnerable to Cleartext credential storage

HIGH Published 2022-05-24 Modified 2022-12-06 Official page ↗
Aliases
CVE-2019-10453
Ecosystem
Maven
Packages
org.jenkins-ci.plugins:delphix
Severity
High
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-312
Reviewed
2022-12-06

Affected packages

• Maven org.jenkins-ci.plugins:delphix: <= 2.0.4 (no fix yet)

Description

Jenkins Delphix Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.

Related

Alias · CVE (1)

  • CVE-2019-10453 Jenkins Delphix Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by… vulnerability

Weakness · CWE (1)

  • CWE-312 Cleartext Storage of Sensitive Information weakness

References