Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2019-10320

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-xm94-9jw8-p6hw

Insertion of Sensitive Information into Externally-Accessible File or Directory in Jenkins Credentials Plugin Jenkins Credentials Plugin 2.1.18 and earlier allowed users with permission to create or update credentials to confirm the existence of files on the Jenkins master with an attacker-specified path, and obtain the certificate content of files containing a PKCS#12 certificate.

gitlab/maven/org.jenkins-ci.plugins/credentials/CVE-2019-10320

File and Directory Information Exposure Jenkins Credentials Plugin allows users with permission to create or update credentials to confirm the existence of files on the Jenkins master with an attacker-specified path, and obtain the certificate content of files containing a PKCS#12 certificate.