Jenkins QMetry for JIRA - Test Management Plugin transmits credentials in its configuration in plain text as part of job configuration forms, potentially resulting in their exposure.
References
Link | Resource |
---|---|
http://www.openwall.com/lists/oss-security/2019/11/21/1 | Mailing List Third Party Advisory |
https://jenkins.io/security/advisory/2019-11-21/#SECURITY-727%20%282%29 |
Configurations
History
28 Oct 2021, 13:53
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : 4.0
v3 : 6.5 |
CWE | CWE-319 |
Information
Published : 2019-11-21 15:15
Updated : 2024-02-04 20:39
NVD link : CVE-2019-16545
Mitre link : CVE-2019-16545
CVE.ORG link : CVE-2019-16545
JSON object : View
Products Affected
qmetry
- jenkins_qmetry_for_jira
CWE
CWE-319
Cleartext Transmission of Sensitive Information