Executive brief
Jenkins Amazon EC2 Plugin leaked beginning of private key in system log
Affected products
- Maven org.jenkins-ci.plugins:ec2
Junglewise Threat Intelligence
CVE-2019-10364: Jenkins Amazon EC2 Plugin leaked beginning of private key in system log
CVE-2019-10364 · Severity: low · CVSS 3 · Published 2022-05-24
Technologies: org.jenkins-ci.plugins:ec2 (Maven). Vendors: Maven.
Related threats
- Lack of SSL/TLS certificate and hostname validation in Amazon EC2 Plugin
- Users with Overall/Read access can enumerate credentials IDs in Amazon EC2 Plugin
- CSRF vulnerability in Amazon EC2 Plugin
- Missing SSH host key validation in Jenkins Amazon EC2 Plugin
- Missing permission checks in Jenkins Amazon EC2 Plugin