Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2019-16574

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-8rfc-v3vj-j62w

Jenkins Alauda DevOps Pipeline Plugin allows attackers with Overall/Read permission to capture credentials stored in Jenkins A missing permission check in Jenkins Alauda DevOps Pipeline Plugin 2.3.2 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.

gitlab/maven/com.alauda.jenkins.plugins/alauda-devops-pipeline/CVE-2019-16574

Insufficiently Protected Credentials A missing permission check in Jenkins Alauda DevOps Pipeline Plugin allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.