jenkins assembla CVE-2019-10420 is a vulnerability in Jenkins Assembla
Published on September 25, 2019

Jenkins Assembla Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.

NVD


Products Associated with CVE-2019-10420

Want to know whenever a new CVE is published for Jenkins Assembla? stack.watch will email you.

Jenkins Assembla
 

Affected Versions

Jenkins project Jenkins Assembla Plugin Version 1.4 and earlier is affected by CVE-2019-10420

Exploit Probability

EPSS
0.01%
Percentile
1.38%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.