Home

CVE-2019-10347

Description

Jenkins Mashup Portlets Plugin stored credentials unencrypted on the Jenkins master where they can be viewed by users with access to the master file system.

Risk Information

Base Score
8.8
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.08

Associated Vulnerability

VulnerabilityOS Platform
Vulnerabilities CVE-2019-10347 are fixed in Jenkins - mashup-portlets-plugin 1.1.0Windows
Vulnerabilities CVE-2019-10347 are fixed in Jenkins - mashup-portlets-plugin for Linux 1.1.0Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234