1. CVE-Search
  2. CVE-2019-10430
ID CVE-2019-10430
Summary Jenkins NeuVector Vulnerability Scanner Plugin 1.5 and earlier stored credentials unencrypted in its global configuration file on the Jenkins master where they could be viewed by users with access to the master file system.
References
Vulnerable Configurations
  • cpe:2.3:a:jenkins:neuvector_vulnerability_scanner:1.0:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:neuvector_vulnerability_scanner:1.0:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:neuvector_vulnerability_scanner:1.1:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:neuvector_vulnerability_scanner:1.1:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:neuvector_vulnerability_scanner:1.2:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:neuvector_vulnerability_scanner:1.2:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:neuvector_vulnerability_scanner:1.3:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:neuvector_vulnerability_scanner:1.3:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:neuvector_vulnerability_scanner:1.4:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:neuvector_vulnerability_scanner:1.4:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:neuvector_vulnerability_scanner:1.5:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:neuvector_vulnerability_scanner:1.5:*:*:*:*:jenkins:*:*
CVSS
Base: 2.1 (as of 25-10-2023 - 18:16)
Impact:
Exploitability:
CWE CWE-312
CAPEC
  • Retrieve Embedded Sensitive Data
    An attacker examines a target system to find sensitive data that has been embedded within it. This information can reveal confidential contents, such as account numbers or individual keys/credentials that can be used as an intermediate step in a larger attack.
Access
VectorComplexityAuthentication
LOCAL LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL NONE NONE
cvss-vector via4 AV:L/AC:L/Au:N/C:P/I:N/A:N
refmap via4
confirm https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1504
mlist [oss-security] 20190925 Multiple vulnerabilities in Jenkins and Jenkins plugins
Last major update 25-10-2023 - 18:16
Published 25-09-2019 - 16:15
Last modified 25-10-2023 - 18:16
Back to Top