CVE-2019-10453: High severity jenkins delphix vulnerability
Jenkins Delphix Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-10453?
CVE-2019-10453 is a vulnerability in the Jenkins Delphix Plugin that allows credentials to be stored unencrypted in its global configuration file on the Jenkins master.
How does CVE-2019-10453 work?
CVE-2019-10453 allows users with access to the Jenkins master file system to view the unencrypted credentials stored in the global configuration file.
What is the severity of CVE-2019-10453?
CVE-2019-10453 has a severity rating of 7.8 (High).
How can I fix CVE-2019-10453?
To fix CVE-2019-10453, upgrade Jenkins Delphix Plugin to version 2.0.5 or later.
Are there any references related to CVE-2019-10453?
Yes, you can find more information about CVE-2019-10453 at the following references: [1](http://www.openwall.com/lists/oss-security/2019/10/16/6) and [2](https://jenkins.io/security/advisory/2019-10-16/#SECURITY-1450).