Lucene search

JenkinsCVE-2019-10398

HistorySep 12, 2019 - 2:15 p.m.

CVE-2019-10398

2019-09-1214:15:11

CWE-522

jenkins

web.nvd.nist.gov

cve

jenkins

beaker builder plugin

security

credentials

encryption

configuration file

nvd

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

5.3

Confidence

High

EPSS

Percentile

12.6%

JSON

Jenkins Beaker Builder Plugin 1.9 and earlier stored credentials unencrypted in its global configuration file on the Jenkins master where they could be viewed by users with access to the master file system.

Affected configurations

Nvd

Node

jenkinsbeaker_builderRange≤1.9jenkins

VendorProductVersionCPE
jenkinsbeaker_builder*cpe:2.3:a:jenkins:beaker_builder:*:*:*:*:*:jenkins:*:*

Vendor	Product	Version	CPE
jenkins	beaker_builder	*	cpe:2.3:a:jenkins:beaker_builder::::::jenkins::*

CNA Affected

[
  {
    "product": "Jenkins Beaker Builder Plugin",
    "vendor": "Jenkins project",
    "versions": [
      {
        "status": "affected",
        "version": "1.9 and earlier"
      }
    ]
  }
]

References

www.openwall.com/lists/oss-security/2019/09/12/2

jenkins.io/security/advisory/2019-09-12/#SECURITY-1545

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

5.3

Confidence

High

EPSS

Percentile

12.6%

JSON

Related for CVE-2019-10398