CVE-2019-10320
- State
- Published
- Severity
- Not scored
- Published
- May 21, 2019
- Updated
- Aug 4, 2024
- Reserved
- Mar 29, 2019
Description
Jenkins Credentials Plugin 2.1.18 and earlier allowed users with permission to create or update credentials to confirm the existence of files on the Jenkins master with an attacker-specified path, and obtain the certificate content of files containing a PKCS#12 certificate.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
Jenkins Credentials PluginJenkins project |
|
References
- [oss-security] 20190521 Multiple vulnerabilities in Jenkins pluginsmailing-list
- 20190524 Exploring the File System via Jenkins Credentials Plugin Vulnerability - CVE-2019-10320mailing-list
- 108462vdb-entry
- https://wwws.nightwatchcybersecurity.com/2019/05/23/exploring-the-file-system-via-jenkins-credentials-plugin-vulnerability-cve-2019-10320/
- RHBA-2019:1605vendor-advisory
- RHSA-2019:1636vendor-advisory
- https://jenkins.io/security/advisory/2019-05-21/#SECURITY-1322
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.