High severity8.8NVD Advisory· Published Oct 16, 2019· Updated Jun 17, 2026

CVE-2019-10448

Description

Jenkins Extensive Testing Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

ghsa-coords
pkg:maven/jenkins.xtc/extensivetesting
Jenkins Project/Jenkins Extensive Testing Pluginv5
Range: 1.4.4b and earlier

Patches

Vulnerability mechanics

References

github.com/advisories/GHSA-8x6c-375h-pm4fghsaADVISORY
jenkins.io/security/advisory/2019-10-16/nvdVendor AdvisoryWEB
nvd.nist.gov/vuln/detail/CVE-2019-10448ghsaADVISORY

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000