Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2019-10370

Jenkins Mask Passwords Plugin 2.12.0 and earlier transmits globally configured passwords in plain text as part of the configuration form, potentially resulting in their exposure.

VectorNETWORK

PublishedAug 07, 2019, 15:15

Published Byjenkinsci-cert@googlegroups.com

Base Score

Score6.5

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

org.jenkins-ci.plugins:mask-passwords(Maven)02.13.0N/A

References

http://www.openwall.com/lists/oss-security/2019/08/07/1
https://jenkins.io/security/advisory/2019-08-07/#SECURITY-157

Weakness Type

CWE-532

CVSS Metrics

Base Score

6.5

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Base SeverityMedium

Version

3.1

Attack Vector (AV)

NETWORK