Medium severity6.5NVD Advisory· Published Jul 19, 2019· Updated Jun 17, 2026

CVE-2019-1010241

Description

Jenkins Credentials Binding Plugin Jenkins 1.17 is affected by: CWE-257: Storing Passwords in a Recoverable Format. The impact is: Authenticated users can recover credentials. The component is: config-variables.jelly line #30 (passwordVariable). The attack vector is: Attacker creates and executes a Jenkins job.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Jenkins Project/Credentials Binding
cpe:2.3:a:jenkins:credentials_binding:1.17:*:*:*:*:jenkins:*:*
ghsa-coords
pkg:maven/org.jenkins-ci.plugins/credentials-binding
Jenkins Credentials Binding Plugin/Jenkinsv5
Range: 1.17

Patches

Vulnerability mechanics

References

docs.google.com/document/d/1MBEoJSMvkjp5Kua0bRD_kiDBisL0fOCwTL9uMWj4lGA/editnvdExploitThird Party AdvisoryWEB
www.securityfocus.com/bid/109320nvdThird Party AdvisoryVDB Entry
github.com/advisories/GHSA-j7gw-mwfg-vqf4ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2019-1010241ghsaADVISORY
web.archive.org/web/20200227030005/https://www.securityfocus.com/bid/109320ghsaWEB

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000