CVE-2019-10370

Опубликовано: 07 авг. 2019

Источник: nvd

CVSS3: 6.5

CVSS2: 4.3

EPSS Низкий

Описание

Jenkins Mask Passwords Plugin 2.12.0 and earlier transmits globally configured passwords in plain text as part of the configuration form, potentially resulting in their exposure.

Ссылки

http://www.openwall.com/lists/oss-security/2019/08/07/1
Mailing List
Third Party Advisory
https://jenkins.io/security/advisory/2019-08-07/#SECURITY-157
Vendor Advisory
http://www.openwall.com/lists/oss-security/2019/08/07/1
Mailing List
Third Party Advisory
https://jenkins.io/security/advisory/2019-08-07/#SECURITY-157
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:jenkins:mask_passwords:*:*:*:*:*:jenkins:*:*

Версия до 2.12.0 (включая)

EPSS

Процентиль: 33%

0.00128

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-532

Связанные уязвимости

GHSA-gp67-c7j2-2qg2