Jenkins NeoLoad Plugin 2.2.5 and earlier stored credentials unencrypted in its global configuration file and in job config.xml files on the Jenkins master where they could be viewed by users with Extended Read permission, or access to the master file system.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: jenkins
Published: 2019-10-16T13:00:46
Updated: 2024-08-04T22:24:18.022Z
Reserved: 2019-03-29T00:00:00
Link: CVE-2019-10440
Vulnrichment
No data.
NVD
Status : Modified
Published: 2019-10-16T14:15:12.043
Modified: 2024-11-21T04:19:08.680
Link: CVE-2019-10440
Redhat
No data.