Executive brief
Jenkins NeuVector Vulnerability Scanner Plugin stored credentials in plain text
Affected products
- Maven io.jenkins.plugins:neuvector-vulnerability-scanner
Junglewise Threat Intelligence
CVE-2019-10430: Jenkins NeuVector Vulnerability Scanner Plugin stored credentials in plain text
CVE-2019-10430 · Severity: low · CVSS 3.1 · Published 2022-05-24
Technologies: io.jenkins.plugins:neuvector-vulnerability-scanner (Maven). Vendors: Maven.
Related threats
- Jenkins NeuVector Vulnerability Scanner Plugin missing permission check
- Jenkins NeuVector Vulnerability Scanner Plugin Cross-Site Request Forgery vulnerability
- Jenkins NeuVector Vulnerability Scanner Plugin disables SSL/TLS certificate and hostname validation
- Content-Security-Policy protection for user content disabled by Jenkins NeuVector Vulnerability Scanner Plugin