GHSA-j7gw-mwfg-vqf4MediumCVSS 6.5

Jenkins Credentials Binding Plugin Stores Passwords in a Recoverable Format

Published
May 24, 2022
Last Modified
March 12, 2025

🔗 CVE IDs covered (1)

CVE-2019-1010241 →

📋 Description

Jenkins Credentials Binding Plugin Jenkins 1.17 is affected by: CWE-257: Storing Passwords in a Recoverable Format. The impact is: Authenticated users can recover credentials. The component is: config-variables.jelly line #30 (passwordVariable). The attack vector is: Attacker creates and executes a Jenkins job.

🎯 Affected products1

  • maven/org.jenkins-ci.plugins:credentials-binding:= 1.17

🔗 References (4)