Executive brief
Jenkins Fortify on Demand Plugin stores credentials in plain text
Affected products
- Maven org.jenkins-ci.plugins:fortify-on-demand-uploader
Junglewise Threat Intelligence
CVE-2019-10449: Jenkins Fortify on Demand Plugin stores credentials in plain text
CVE-2019-10449 · Severity: low · CVSS 3 · Published 2022-05-24
Technologies: org.jenkins-ci.plugins:fortify-on-demand-uploader (Maven). Vendors: Maven.
Related threats
- Missing permission checks in Jenkins Fortify on Demand Plugin
- CSRF vulnerability in Jenkins Fortify on Demand Plugin
- Users with Overall/Read access could enumerate credentials IDs in Jenkins Fortify on Demand Plugin
- Jenkins Fortify on Demand Uploader Plugin CSRF vulnerability
- SSRF vulnerability due to missing permission check in Fortify on Demand Uploader Plugin