VULNERABILITY INTELLIGENCE

CVE-2019-1003048

CVSS score7.8 HIGH

EPSS probability0.30%

CISA KEVNot currently listed

Published2019-03-28

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

A vulnerability in Jenkins PRQA Plugin 3.1.0 and earlier allows attackers with local file system access to the Jenkins home directory to obtain the unencrypted password from the plugin configuration.

Weakness classification

nvd@nist.gov: CWE-311

Primary references

jenkinsci-cert@googlegroups.com — Mailing List, Third Party Advisory
jenkinsci-cert@googlegroups.com — Third Party Advisory, VDB Entry
jenkinsci-cert@googlegroups.com — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory