CVE-2019-10302

CVE-2019-10302: vulnerability in Jenkins jira-ext Plugin

Published · Updated

Follow this CVE+ Monitor Jenkins jira-ext Plugin+ Monitor org.jenkins-ci.plugins:jira-ext

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.4%
Jenkins jira-ext Plugin 0.8 and earlier stored credentials unencrypted in its global configuration file on the Jenkins master where they could be viewed by users with access to the master file system.
Affected products
Jenkins project · Jenkins jira-ext Plugin