GHSA-5c97-gxr3-r368

Suggest an improvement
Source
https://github.com/advisories/GHSA-5c97-gxr3-r368
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-5c97-gxr3-r368/GHSA-5c97-gxr3-r368.json
JSON Data
https://api.test.osv.dev/v1/vulns/GHSA-5c97-gxr3-r368
Aliases
  • CVE-2019-16572
Published
2022-05-24T17:03:49Z
Modified
2024-08-09T22:00:57.260017Z
Severity
  • 3.3 (Low) CVSS_V3 - CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVSS Calculator
Summary
Jenkins Weibo Plugin stores credentials unencrypted in its global configuration file
Details

Jenkins Weibo Plugin 1.0.1 and earlier stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.

Database specific
{
    "nvd_published_at": "2019-12-17T15:15:00Z",
    "cwe_ids": [
        "CWE-1024",
        "CWE-256",
        "CWE-522"
    ],
    "severity": "LOW",
    "github_reviewed": true,
    "github_reviewed_at": "2022-12-06T21:47:50Z"
}
References

Affected packages

Maven / org.jenkins-ci.plugins:weibo

Package

Name
org.jenkins-ci.plugins:weibo
View open source insights on deps.dev
Purl
pkg:maven/org.jenkins-ci.plugins/weibo

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Last affected
1.0.1

Affected versions

1.*

1.0.1