Publish GHSA-746x-xxrx-23jp

This commit is contained in:
advisory-database[bot]
2024-01-30 21:53:30 +00:00
parent 2994fe5cd8
commit b4c670913a
@@ -1,11 +1,12 @@
{
"schema_version": "1.4.0",
"id": "GHSA-746x-xxrx-23jp",
"modified": "2022-05-13T01:15:02Z",
"modified": "2024-01-30T21:51:21Z",
"published": "2022-05-13T01:15:02Z",
"aliases": [
"CVE-2019-10294"
],
"summary": "Jenkins Kmap Plugin stores credentials in plain text ",
"details": "Jenkins Kmap Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.",
"severity": [
{
@@ -14,7 +15,15 @@
}
],
"affected": [
{
"package": {
"ecosystem": "Maven",
"name": "org.jenkins-ci.plugins:kmap-jenkins"
},
"versions": [
"1.6"
]
}
],
"references": [
{
@@ -39,8 +48,8 @@
"CWE-522"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"github_reviewed": true,
"github_reviewed_at": "2024-01-30T21:51:21Z",
"nvd_published_at": "2019-04-04T16:29:00Z"
}
}