Moderate severityNVD Advisory· Published Aug 7, 2019· Updated Aug 4, 2024
CVE-2019-10370
CVE-2019-10370
Description
Jenkins Mask Passwords Plugin 2.12.0 and earlier transmits globally configured passwords in plain text as part of the configuration form, potentially resulting in their exposure.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
org.jenkins-ci.plugins:mask-passwordsMaven | < 2.13.0 | 2.13.0 |
Affected products
2- Range: 2.12.0 and earlier
Patches
Vulnerability mechanics
Generated on May 9, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.
References
6- github.com/advisories/GHSA-gp67-c7j2-2qg2ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2019-10370ghsaADVISORY
- www.openwall.com/lists/oss-security/2019/08/07/1ghsamailing-listx_refsource_MLISTWEB
- github.com/jenkinsci/mask-passwords-plugin/commit/aadefdbf319954cf0c5acbe032637e1c0a924f37ghsaWEB
- github.com/jenkinsci/mask-passwords-plugin/pull/20ghsaWEB
- jenkins.io/security/advisory/2019-08-07/ghsax_refsource_CONFIRMWEB
News mentions
0No linked articles in our index yet.