Aws Device Farm
1 CVEs
product
Monthly
Jenkins aws-device-farm Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Jenkins
Information Disclosure
Aws Device Farm
NVD
CVSS 3.1
8.8
EPSS
1.4%
CVE-2019-1003064
Maven
EPSS 1%
CVSS 8.8
HIGH
PATCH
This Week
Jenkins aws-device-farm Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Jenkins
Information Disclosure
Aws Device Farm
NVD