Lucene search
GoogleOSV:GHSA-JV62-6XVC-CCWHHistoryMay 24, 2022 - 4:56 p.m.
Jenkins elOyente Plugin has Insufficiently Protected Credentials
2022-05-2416:56:47
Google
osv.dev
7
0.0004 Low
EPSS
Percentile
12.6%
elOyente Plugin stores a password unencrypted in its global configuration file com.technicolor.eloyente.ElOyente.xml on the Jenkins controller. This password can be viewed by users with access to the Jenkins controller file system.
As of publication of this advisory, there is no fix.
| CPE | Name | Operator | Version |
|---|---|---|---|
| com.technicolor:eloyente | eq | 1.3 | |
| com.technicolor:eloyente | eq | 1.2 | |
| com.technicolor:eloyente | eq | 1.0 |
Related
osv
osv
CVE-2019-10424
2019-09-25 16:15:11
cve
cve
CVE-2019-10424
2019-09-25 16:15:11
cvelist
cvelist
CVE-2019-10424
2019-09-25 15:05:34
prion
prion
Design/Logic Flaw
2019-09-25 16:15:00
github
github
Jenkins elOyente Plugin has Insufficiently Protected Credentials
2022-05-24 16:56:47
nvd
nvd
CVE-2019-10424
2019-09-25 16:15:11