vulnerability

Jenkins Advisory 2019-09-25: CVE-2019-10415: CVE-2019-10416: Violation Comments to GitLab Plugin stored credentials in plain text

Try Surface Command

Back to search

Severity	CVSS	Published	Added	Modified
4	(AV:N/AC:L/Au:S/C:P/I:N/A:N)	Sep 25, 2019	Jul 12, 2022	Mar 27, 2026

Severity

CVSS

(AV:N/AC:L/Au:S/C:P/I:N/A:N)

Published

Sep 25, 2019

Added

Jul 12, 2022

Modified

Mar 27, 2026

Description

Jenkins Violation Comments to GitLab Plugin 2.28 and earlier stored credentials unencrypted in its global configuration file on the Jenkins master where they could be viewed by users with access to the master file system.

Solutions

jenkins-lts-upgrade-2_176_4jenkins-upgrade-2_197

References

CVE-2019-10415
https://attackerkb.com/topics/CVE-2019-10415
CVE-2019-10416
https://attackerkb.com/topics/CVE-2019-10416
CWE-522
EUVD-EUVD-2022-3189
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-3189
https://jenkins.io/security/advisory/2019-09-25/

NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today