CVE-2019-10303
CVE-2019-10303
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 1.4%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
18 Apr 2019Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Jenkins Azure PublisherSettings Credentials Plugin 1.2 and earlier stored credentials unencrypted in the credentials.xml file on the Jenkins master where they could be viewed by users with access to the master file system.
Affected products
Jenkins project · Jenkins Azure PublisherSettings Credentials PluginWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →