PT-2019-11824 · Jenkins · Jenkins Neuvector Vulnerability Scanner Plugin+1
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Jenkins NeuVector Vulnerability Scanner Plugin versions 1.5 and earlier
Description
The issue allows stored credentials to be viewed unencrypted in the global configuration file on the Jenkins master by users with access to the master file system. This occurs because the credentials are stored unencrypted.
Recommendations
For Jenkins NeuVector Vulnerability Scanner Plugin versions 1.5 and earlier, update to a version that stores credentials securely, ensuring they are encrypted in the global configuration file to prevent unauthorized access.
Correção
Cleartext Storage of Sensitive Information
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Jenkins
Jenkins Neuvector Vulnerability Scanner Plugin