Executive brief
Jenkins Credentials Binding Plugin Stores Passwords in a Recoverable Format
Affected products
- Maven org.jenkins-ci.plugins:credentials-binding
Junglewise Threat Intelligence
CVE-2019-1010241: Jenkins Credentials Binding Plugin Stores Passwords in a Recoverable Format
CVE-2019-1010241 · Severity: low · CVSS 3.1 · Published 2022-05-24
Technologies: org.jenkins-ci.plugins:credentials-binding (Maven). Vendors: Maven.
Related threats
- Jenkins Credentials Binding Plugin path traversal in file credentials
- Jenkins Credentials Binding Plugin has a path traversal vulnerability
- Jenkins Credentials Binding Plugin vulnerability can expose sensitive information in logger messages
- Improper masking of some secrets in Jenkins Credentials Binding Plugin
- Secrets are not masked by Jenkins Credentials Binding Plugin in builds without build steps