Codescan
1 CVEs
product
Monthly
Jenkins CodeScan Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.
Jenkins
Information Disclosure
Codescan
NVD
CVSS 3.1
5.5
EPSS
0.3%
CVE-2019-10423
Maven
EPSS 0%
CVSS 5.5
MEDIUM
This Month
Jenkins CodeScan Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.
Jenkins
Information Disclosure
Codescan
NVD