CVE-2019-1003048

CVSS v3.1 7.8 (High)

CVSS v2.0 2.1 (Low)

EPSS 0.04 % (5^th)

Affected Products 1

Advisories 2

A vulnerability in Jenkins PRQA Plugin 3.1.0 and earlier allows attackers with local file system access to the Jenkins home directory to obtain the unencrypted password from the plugin configuration.

Weaknesses

CWE-311: Missing Encryption of Sensitive Data

CVE Status: PUBLISHED
CNA: Jenkins Project
Published Date: 2019-03-28 18:29:00
(5 years ago)
Updated Date: 2023-10-25 18:16:04
(10 months ago)

Affected Products

Jenkins

Prqa

Configuration #1

		CPE23	From	Up To
	Jenkins Prqa for Jenkins 3.1.0 and prior versions	cpe:2.3:a:jenkins:prqa::::::jenkins		<= 3.1.0