CVE-2019-1003048

Published: Mar 28, 2019Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

A vulnerability in Jenkins PRQA Plugin 3.1.0 and earlier allows attackers with local file system access to the Jenkins home directory to obtain the unencrypted password from the plugin configuration.

Affected (1)

Products: Jenkins: Prqa

Jenkins

1 product

Prqa

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Jenkins Prqa	Up to 3.1.0

Related CWEs

CWE-311

Missing Encryption of Sensitive Data

The product does not encrypt sensitive or critical information before storage or transmission.

References (6)

http://www.openwall.com/lists/oss-security/2019/03/28/2

Source: jenkinsci-cert@googlegroups.com

Mailing ListThird Party Advisory

http://www.securityfocus.com/bid/107628

Source: jenkinsci-cert@googlegroups.com

Third Party AdvisoryVDB Entry

https://jenkins.io/security/advisory/2019-03-25/#SECURITY-1089

Source: jenkinsci-cert@googlegroups.com

Vendor Advisory

http://www.openwall.com/lists/oss-security/2019/03/28/2

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://www.securityfocus.com/bid/107628

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://jenkins.io/security/advisory/2019-03-25/#SECURITY-1089

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.