CVE-2019-10428 — Jenkins project / Jenkins Aqua Security Scanner Plugin

CVE-2019-10428

Jenkins project / Jenkins Aqua Security Scanner Plugin PUBLISHED

Description (CNA)

Jenkins Aqua Security Scanner Plugin 3.0.17 and earlier transmitted configured credentials in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure.

Affected (CNA)

Vendor / product	Versions
Jenkins project / Jenkins Aqua Security Scanner Plugin	affected 3.0.17 and earlier

CWE

No CWE identifiers supplied.

References

https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1508
http://www.openwall.com/lists/oss-security/2019/09/25/3

ADP enrichment

CVE

No English description supplied.

https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1508
http://www.openwall.com/lists/oss-security/2019/09/25/3