Official Owasp Zap
1 CVEs
product
Monthly
Jenkins Official OWASP ZAP Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Jenkins
Information Disclosure
Official Owasp Zap
NVD
CVSS 3.1
8.8
EPSS
1.4%
CVE-2019-1003060
Maven
EPSS 1%
CVSS 8.8
HIGH
This Week
Jenkins Official OWASP ZAP Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Jenkins
Information Disclosure
Official Owasp Zap
NVD