Description

A vulnerability in Jenkins PRQA Plugin 3.1.0 and earlier allows attackers with local file system access to the Jenkins home directory to obtain the unencrypted password from the plugin configuration.

Remediation

References

https://jenkins.io/security/advisory/2019-03-25/#SECURITY-1089

http://www.openwall.com/lists/oss-security/2019/03/28/2

http://www.securityfocus.com/bid/107628

Related Vulnerabilities

CVE-2009-2902 Vulnerability in maven package tomcat:catalina

CVE-2022-34183 Vulnerability in maven package io.jenkins.plugins:agent-server-parameter

CVE-2022-39263 Vulnerability in npm package @next-auth/upstash-redis-adapter

CVE-2018-6341 Vulnerability in maven package org.webjars.bower:vue

CVE-2014-0107 Vulnerability in maven package xalan:xalan

Severity

High

Classification

CWE-311 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Tags

Vendor Advisory Mailing List Third Party Advisory VDB Entry