CVE-2019-16568

EPSS 0.6%

Vexday Risk Score

3Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS —EPSS 0.6%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

17 dic 2019Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

Jenkins SCTMExecutor Plugin 2.2 and earlier transmits previously configured service credentials in plain text as part of the global configuration, as well as individual jobs' configurations.

Productos afectados

Jenkins project · Jenkins SCTMExecutor Plugin

Referencias

https://jenkins.io/security/advisory/2019-12-17/#SECURITY-1521 http://www.openwall.com/lists/oss-security/2019/12/17/1