CVE-2019-1003048

EPSS 0.3%

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

28 Mar 2019Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

A vulnerability in Jenkins PRQA Plugin 3.1.0 and earlier allows attackers with local file system access to the Jenkins home directory to obtain the unencrypted password from the plugin configuration.

Affected products

Jenkins project · Jenkins PRQA Plugin

References

https://jenkins.io/security/advisory/2019-03-25/#SECURITY-1089 http://www.openwall.com/lists/oss-security/2019/03/28/2 http://www.securityfocus.com/bid/107628