jenkins azure-ad CVE-2019-10318 is a vulnerability in Jenkins Azure Ad
Published on April 30, 2019

Jenkins Azure AD Plugin 0.3.3 and earlier stored the client secret unencrypted in the global config.xml configuration file on the Jenkins master where it could be viewed by users with access to the master file system.

NVD


Products Associated with CVE-2019-10318

Want to know whenever a new CVE is published for Jenkins Azure Ad? stack.watch will email you.

Jenkins Azure Ad
 

Affected Versions

Jenkins project Jenkins Azure AD Plugin Version 0.3.3 and earlier is affected by CVE-2019-10318

Exploit Probability

EPSS
0.08%
Percentile
23.21%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.