CVE-2019-16572: Medium severity jenkins vulnerability
Jenkins Weibo Plugin 1.0.1 and earlier stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-16572?
CVE-2019-16572 is rated as a medium severity vulnerability due to its potential exposure of sensitive credentials.
How do I fix CVE-2019-16572?
To fix CVE-2019-16572, upgrade the Weibo Plugin to version 1.0.2 or later which includes proper credential storage.
What does CVE-2019-16572 affect?
CVE-2019-16572 affects the Weibo Plugin for Jenkins versions 1.0.1 and earlier, specifically impacting credential storage.
Who can exploit CVE-2019-16572?
CVE-2019-16572 can be exploited by users with access to the Jenkins master file system, potentially allowing them to view unencrypted credentials.
Is CVE-2019-16572 related to any other vulnerabilities?
CVE-2019-16572 is related to general security concerns regarding sensitive data management within Jenkins, emphasizing secure storage practices.