Jenkins Jira Issue Updater Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.
Advisories
Source ID Title
EUVD EUVD EUVD-2022-4699 Jenkins Jira Issue Updater Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.
Github GHSA Github GHSA GHSA-p6qr-286g-79rv Jenkins Jira Issue Updater Plugin stores credentials in plain text
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: jenkins

Published:

Updated: 2024-08-05T03:07:17.915Z

Reserved: 2019-04-03T00:00:00

Link: CVE-2019-1003054

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2019-04-04T16:29:00.570

Modified: 2024-11-21T04:17:49.210

Link: CVE-2019-1003054

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.