VDB
CVE-2019-10379
CVE-2019-10379
PUBLISHED
CVSS 6.5 MEDIUM
Jenkins Google Cloud Messaging Notification Plugin 1.0 and earlier stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.
EPSS 0.38% · 31.9th percentile
Risk Scores
CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS Score
0.38%
31.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Jenkins project | Jenkins Google Cloud Messaging Notification Plugin | 1.0 and earlier |
| Maven | org.jenkins-ci.plugins:gcm-notification | 0 |
| cloud_messaging_notification | 0 |
Timeline
- Aug 7, 2019 CVE Published
- Apr 14, 2021 EPSS Score
- Jun 23, 2021 EPSS Score
- Aug 25, 2021 EPSS Score
- Oct 26, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Feb 4, 2022 EPSS Score
- Mar 1, 2022 EPSS Score
- Apr 1, 2022 EPSS Score
- May 3, 2022 EPSS Score
- Jul 5, 2022 EPSS Score
- Sep 6, 2022 EPSS Score