Vulnerabilities > Cleartext Storage of Sensitive Information
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2019-10-16 | CVE-2019-10453 | Cleartext Storage of Sensitive Information vulnerability in Jenkins Delphix Jenkins Delphix Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system. | 7.8 |
2019-10-16 | CVE-2019-10452 | Cleartext Storage of Sensitive Information vulnerability in Jenkins View26 Test-Reporting Jenkins View26 Test-Reporting Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system. | 4.3 |
2019-10-16 | CVE-2019-10451 | Cleartext Storage of Sensitive Information vulnerability in Jenkins Soasta Cloudtest Jenkins SOASTA CloudTest Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system. | 4.3 |
2019-10-16 | CVE-2019-10450 | Cleartext Storage of Sensitive Information vulnerability in Jenkins Elasticbox CI Jenkins ElasticBox CI Plugin stores credentials unencrypted in the global config.xml configuration file on the Jenkins master where they can be viewed by users with access to the master file system. | 3.3 |
2019-10-16 | CVE-2019-10449 | Cleartext Storage of Sensitive Information vulnerability in Jenkins Fortify on Demand Jenkins Fortify on Demand Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system. | 8.8 |
2019-10-16 | CVE-2019-10447 | Cleartext Storage of Sensitive Information vulnerability in Jenkins Sofy.Ai 1.0.0/1.0.1/1.0.3 Jenkins Sofy.AI Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system. | 4.3 |
2019-10-16 | CVE-2019-10443 | Cleartext Storage of Sensitive Information vulnerability in Jenkins Icescrum Jenkins iceScrum Plugin 1.1.4 and earlier stored credentials unencrypted in job config.xml files on the Jenkins master where they could be viewed by users with Extended Read permission, or access to the master file system. | 8.8 |
2019-10-16 | CVE-2019-10440 | Cleartext Storage of Sensitive Information vulnerability in Jenkins Neoload Jenkins NeoLoad Plugin 2.2.5 and earlier stored credentials unencrypted in its global configuration file and in job config.xml files on the Jenkins master where they could be viewed by users with Extended Read permission, or access to the master file system. | 8.8 |
2019-10-14 | CVE-2019-3767 | Cleartext Storage of Sensitive Information vulnerability in Dell Imageassist Dell ImageAssist versions prior to 8.7.15 contain an information disclosure vulnerability. | 8.2 |
2019-10-09 | CVE-2019-15023 | Cleartext Storage of Sensitive Information vulnerability in Zingbox Inspector A security vulnerability exists in Zingbox Inspector versions 1.294 and earlier, that results in passwords for 3rd party integrations being stored in cleartext in device configuration. | 7.5 |