CVE-2019-1003048

CVE-2019-1003048

EPSS 0.3%

A vulnerability in Jenkins PRQA Plugin 3.1.0 and earlier allows attackers with local file system access to the Jenkins home directory to obtain the unencrypted password from the plugin configuration.

Affected products

Jenkins project · Jenkins PRQA Plugin

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://jenkins.io/security/advisory/2019-03-25/#SECURITY-1089 http://www.openwall.com/lists/oss-security/2019/03/28/2 http://www.securityfocus.com/bid/107628