Description

An insufficiently protected credentials vulnerability exists in JenkinsAppDynamics Dashboard Plugin 1.0.14 and earlier in src/main/java/nl/codecentric/jenkins/appd/AppDynamicsResultsPublisher.java that allows attackers without permission to obtain passwords configured in jobs to obtain them.

Remediation

References

http://www.securityfocus.com/bid/107476

https://jenkins.io/security/advisory/2019-03-06/#SECURITY-1087

Related Vulnerabilities

CVE-2019-16763 Vulnerability in npm package pannellum

CVE-2021-26073 Vulnerability in npm package atlassian-connect-express

CVE-2017-16067 Vulnerability in npm package node-opencv

CVE-2016-8745 Vulnerability in maven package org.apache.tomcat:coyote

CVE-2021-27292 Vulnerability in npm package ua-parser-js

Severity

Critical

Classification

CWE-522 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Tags

Third Party Advisory VDB Entry Vendor Advisory