CVE-2019-10287

2019-04-0416:29:02

Google

osv.dev

6.5 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

66.2%

JSON

Jenkins youtrack-plugin Plugin 0.7.1 and older stored credentials unencrypted in its global configuration file on the Jenkins master where they could be viewed by users with access to the master file system.

CPENameOperatorVersion
youtrack-plugineqyoutrack-plugin-0.6.6
youtrack-plugineqyoutrack-plugin-0.6
youtrack-plugineqyoutrack-plugin-0.5.3
youtrack-plugineqyoutrack-plugin-0.6.5
youtrack-plugineqremove
youtrack-plugineqyoutrack-plugin-0.7.0
youtrack-plugineqyoutrack-plugin-0.6.0-beta3
youtrack-plugineqyoutrack-plugin-0.6.4-beta2
youtrack-plugineqyoutrack-plugin-0.6.4-beta
youtrack-plugineqyoutrack-plugin-0.3

Name	Operator	Version
youtrack-plugin	eq	youtrack-plugin-0.6.6
youtrack-plugin	eq	youtrack-plugin-0.6
youtrack-plugin	eq	youtrack-plugin-0.5.3
youtrack-plugin	eq	youtrack-plugin-0.6.5
youtrack-plugin	eq	remove
youtrack-plugin	eq	youtrack-plugin-0.7.0
youtrack-plugin	eq	youtrack-plugin-0.6.0-beta3
youtrack-plugin	eq	youtrack-plugin-0.6.4-beta2
youtrack-plugin	eq	youtrack-plugin-0.6.4-beta
youtrack-plugin	eq	youtrack-plugin-0.3