What is GHSA-65rj-cgrp-g65w?

GHSA-65rj-cgrp-g65w is a security advisory published by GitHub Security Advisories with Medium severity. Jenkins IBM AppScan Plugin showed plain text password in job configuration form fields

Which CVE IDs does GHSA-65rj-cgrp-g65w cover?

GHSA-65rj-cgrp-g65w covers the following CVE IDs: CVE-2019-10391. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-65rj-cgrp-g65w?

GHSA-65rj-cgrp-g65w has a CVSS v3 base score of 6.5, published by GitHub Security Advisories.

Which products are affected by GHSA-65rj-cgrp-g65w?

GHSA-65rj-cgrp-g65w affects 1 product, including: maven/com.hcl.security:ibm-application-security:\u003c= 1.2.4.

GHSA-65rj-cgrp-g65wMediumCVSS 6.5

Jenkins IBM AppScan Plugin showed plain text password in job configuration form fields

Vendor

GitHub Security Advisories

Published

May 24, 2022

Last Modified

January 30, 2024

🔗 CVE IDs covered (1)

CVE-2019-10391 →

📋 Description

Jenkins IBM Application Security on Cloud Plugin 1.2.4 and earlier transmitted configured passwords in plain text as part of job configuration forms, potentially resulting in their exposure. This plugin has bee deprecated.

🎯 Affected products1

maven/com.hcl.security:ibm-application-security:<= 1.2.4

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2019-10391
https://jenkins.io/security/advisory/2019-08-28/#SECURITY-1512
http://www.openwall.com/lists/oss-security/2019/08/28/4
https://github.com/advisories/GHSA-65rj-cgrp-g65w