What is GHSA-mxmw-6qgj-h67x?

GHSA-mxmw-6qgj-h67x is a security advisory published by GitHub Security Advisories with Low severity. Jenkins PRQA Plugin stored password in plain text

Which CVE IDs does GHSA-mxmw-6qgj-h67x cover?

GHSA-mxmw-6qgj-h67x covers the following CVE IDs: CVE-2019-1003048. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-mxmw-6qgj-h67x?

GHSA-mxmw-6qgj-h67x has a CVSS v3 base score of 3.3, published by GitHub Security Advisories.

Which products are affected by GHSA-mxmw-6qgj-h67x?

GHSA-mxmw-6qgj-h67x affects 1 product, including: maven/com.programmingresearch:prqa-plugin:\u003c 3.1.2.

GHSA-mxmw-6qgj-h67xLowCVSS 3.3

Jenkins PRQA Plugin stored password in plain text

Vendor

GitHub Security Advisories

Published

May 13, 2022

Last Modified

October 26, 2023

🔗 CVE IDs covered (1)

CVE-2019-1003048 →

📋 Description

Jenkins PRQA Plugin stored a password unencrypted in its global configuration file on the Jenkins controller. This password could be viewed by users with access to the Jenkins controller file system.

The plugin now stores the password encrypted in the configuration files on disk.

🎯 Affected products1

maven/com.programmingresearch:prqa-plugin:< 3.1.2

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2019-1003048
https://jenkins.io/security/advisory/2019-03-25/#SECURITY-1089
http://www.openwall.com/lists/oss-security/2019/03/28/2
https://web.archive.org/web/20200227082607/http://www.securityfocus.com/bid/107628
https://github.com/advisories/GHSA-mxmw-6qgj-h67x