CVE-2019-10450

Published: Oct 16, 2019Modified: Jun 17, 2026

3.3

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Exploitability: 1.8 / Impact: 1.4

Source: NVD

Description

Jenkins ElasticBox CI Plugin stores credentials unencrypted in the global config.xml configuration file on the Jenkins master where they can be viewed by users with access to the master file system.

Affected (1)

Products: Jenkins: Elasticbox Ci

Jenkins

1 product

Elasticbox Ci

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Jenkins Elasticbox Ci	Up to 5.0.1

Related CWEs

CWE-312

Cleartext Storage of Sensitive Information

The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.

References (2)

https://jenkins.io/security/advisory/2019-10-16/#SECURITY-1434

Source: jenkinsci-cert@googlegroups.com

Vendor Advisory

https://jenkins.io/security/advisory/2019-10-16/#SECURITY-1434

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.