CVE-2019-1003096 | BDVDB-2026-114792 Detail

Jenkins projectJenkins TestFairy Plugin

Description#

Jenkins TestFairy Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/107790
http://www.openwall.com/lists/oss-security/2019/04/12/2
https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1062

Exploit#

No public exploit known

History#

Version 12019-04-04Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.