GitHub Advisoryadvisory · Maven

GHSA-56gj-927p-mfph Jenkins Aqua Security Serverless Scanner Plugin showed plain text password in job configuration form fields

LOW Published 2022-05-24 Modified 2024-04-01 Official page ↗
Aliases
CVE-2019-10397
Ecosystem
Maven
Packages
org.jenkins-ci.plugins:aqua-serverless
Severity
Low
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
Weaknesses
CWE-319
Reviewed
2024-01-30

Affected packages

• Maven org.jenkins-ci.plugins:aqua-serverless: < 1.0.5 → fixed in 1.0.5

Description

Jenkins Aqua Security Serverless Scanner Plugin 1.0.4 and earlier transmitted configured passwords in plain text as part of job configuration forms, potentially resulting in their exposure.

Related

Alias · CVE (1)

  • CVE-2019-10397 Jenkins Aqua Security Serverless Scanner Plugin 1.0.4 and earlier transmitted configured passwords in plain text as part of job… vulnerability

Weakness · CWE (1)

  • CWE-319 Cleartext Transmission of Sensitive Information weakness

References