VULNERABILITY INTELLIGENCE

CVE-2019-1003070

CVSS score8.8 HIGH
EPSS probability1.35%
CISA KEVNot currently listed
Published2019-04-04
Last modified2026-06-17

Description

Jenkins veracode-scanner Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.

Primary references

  • jenkins — vdb-entry, x_refsource_BID
  • jenkins — mailing-list, x_refsource_MLIST
  • jenkins — x_refsource_CONFIRM