Maven package
com.cloudcoreo.plugins/cloudcoreo-deploytime
pkg:maven/com.cloudcoreo.plugins/cloudcoreo-deploytime
Vulnerabilities (1)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2019-10299 | Hig | 8.8 | <= 0.2.3 | — | Apr 4, 2019 | Jenkins CloudCoreo DeployTime Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system. |
- affected <= 0.2.3
Jenkins CloudCoreo DeployTime Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.