CVE-2019-10391 — Jenkins project / Jenkins IBM Application Security on Cloud Plugin

CVE-2019-10391

Jenkins project / Jenkins IBM Application Security on Cloud Plugin PUBLISHED

Description (CNA)

Jenkins IBM Application Security on Cloud Plugin 1.2.4 and earlier transmitted configured passwords in plain text as part of job configuration forms, potentially resulting in their exposure.

Affected (CNA)

Vendor / product	Versions
Jenkins project / Jenkins IBM Application Security on Cloud Plugin	affected 1.2.4 and earlier

CWE

No CWE identifiers supplied.

References

http://www.openwall.com/lists/oss-security/2019/08/28/4
https://jenkins.io/security/advisory/2019-08-28/#SECURITY-1512

ADP enrichment

CVE

No English description supplied.

http://www.openwall.com/lists/oss-security/2019/08/28/4
https://jenkins.io/security/advisory/2019-08-28/#SECURITY-1512