{"id":"CVE-2019-10320","aliases":["EUVD-2022-5823","GHSA-xm94-9jw8-p6hw","RHBA-2019:1605","RHSA-2019:1636"],"status":"published","title":"Insertion of Sensitive Information into Externally-Accessible File or Directory in Jenkins Credentials Plugin","description":"Jenkins Credentials Plugin 2.1.18 and earlier allowed users with permission to create or update credentials to confirm the existence of files on the Jenkins master with an attacker-specified path, and obtain the certificate content of files containing a PKCS#12 certificate.","severity":{"version":"3.0","score":4.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.0097,"percentile":0.62126,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-200","CWE-538"],"published":"2019-05-21T13:00:22Z","modified":"2026-10-24T10:30:29Z","fixes":[{"ecosystem":"Maven","package":"org.jenkins-ci.plugins:credentials","fixed_in":["2.1.19"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"org.jenkins-ci.plugins:credentials","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"2.1.18"},{"fixed":"2.1.19"}]}]},{"source":"osv","ecosystem":"Maven","package":"org.jenkins-ci.plugins:credentials","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.19"}]}],"versions":["1.0","1.1","1.10","1.11","1.12","1.13","1.14","1.15","1.16","1.16.1","1.17","1.18","1.19","1.2","1.20","1.21","1.22","1.23","1.24","1.25","1.26","1.27","1.28","1.3","1.3.1","1.4","1.5","1.6","1.7","1.7.1","1.7.2","1.7.3","1.7.4","1.7.5","1.7.6","1.8","1.8.1","1.8.2","1.8.3","1.8.4","1.9","1.9.1","1.9.2","1.9.3","1.9.4","2.0","2.0.1","2.0.2","2.0.3","2.0.4","2.0.5","2.0.6","2.0.7","2.1.0","2.1.1","2.1.10","2.1.11","2.1.12","2.1.13","2.1.14","2.1.15","2.1.16","2.1.17","2.1.18","2.1.2","2.1.3","2.1.4","2.1.5","2.1.6","2.1.7","2.1.8","2.1.9"]},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-enterprise-service-catalog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.11.117-1.git.1.376e432.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-enterprise-service-catalog-svcat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.11.117-1.git.1.376e432.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-cluster-autoscaler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.117-1.git.1.caa79fa.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-descheduler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.117-1.git.1.1635b0a.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-dockerregistry","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.117-1.git.1.6a42b08.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-metrics-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.117-1.git.1.319d58e.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-node-problem-detector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.117-1.git.1.0345fe3.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-service-idler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.117-1.git.1.887bb82.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-web-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.117-1.git.1.be7a05c.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.14-1.rhaos3.11.gitd56660e.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"cri-o-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.14-1.rhaos3.11.gitd56660e.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"golang-github-openshift-oauth-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.117-1.git.1.2b006d2.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"golang-github-prometheus-alertmanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.117-1.git.1.207ef35.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"golang-github-prometheus-node_exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.117-1.git.1.dcee33f.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"golang-github-prometheus-prometheus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.117-1.git.1.f52d417.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"jenkins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.164.2.1555422716-1.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"jenkins-2-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.1559667994-1.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"openshift-ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.123-1.git.0.db681ba.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"openshift-ansible-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.123-1.git.0.db681ba.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"openshift-ansible-playbooks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.123-1.git.0.db681ba.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"openshift-ansible-roles","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.123-1.git.0.db681ba.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"openshift-ansible-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.123-1.git.0.db681ba.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"openshift-enterprise-autoheal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.117-1.git.1.ef32a58.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"openshift-enterprise-cluster-capacity","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.117-1.git.1.6593fce.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"prometheus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.117-1.git.1.f52d417.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"prometheus-alertmanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.117-1.git.1.207ef35.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"prometheus-node-exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.117-1.git.1.dcee33f.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.1::el7","package":"jenkins-2-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.1561471763-1.el7"}]}],"bundled":3}],"products":[{"vendor":"jenkins","product":"credentials"},{"vendor":"jenkins project","product":"jenkins credentials plugin"}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2019/05/21/1","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://seclists.org/fulldisclosure/2019/May/39","tags":["mailing-list","x_refsource_FULLDISC","x_transferred","web"]},{"url":"http://www.securityfocus.com/bid/108462","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"https://wwws.nightwatchcybersecurity.com/2019/05/23/exploring-the-file-system-via-jenkins-credentials-plugin-vulnerability-cve-2019-10320/","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"https://access.redhat.com/errata/RHBA-2019:1605","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2019:1636","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory","web"]},{"url":"https://jenkins.io/security/advisory/2019-05-21/#SECURITY-1322","tags":["x_refsource_CONFIRM","x_transferred","Mitigation","Vendor Advisory","advisory","web","article"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-10320","tags":["advisory"]},{"url":"https://github.com/jenkinsci/credentials-plugin/commit/40d0b5cc53c265b601ffaa4469310fad390a80fb","tags":["web"]},{"url":"https://github.com/advisories/GHSA-xm94-9jw8-p6hw"},{"url":"https://wwws.nightwatchcybersecurity.com/2019/05/23/exploring-the-file-system-via-jenkins-credentials-plugin-vulnerability-cve-2019-10320","tags":["web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1418021","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1571190","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1585070","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1600741","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1608260","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1624316","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1631687","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1639427","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1640382","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1645656","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1648973","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1651564","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1652746","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1656083","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1656487","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1661076","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1667063","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1667801","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1671315","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1671837","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1676399","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1680059","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1682924","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1688250","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1688318","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1689230","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1689796","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1690066","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1691023","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1694724","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1695903","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1696249","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1698018","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1698922","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1699533","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1699696","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1700875","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1701806","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1702544","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1702693","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1703136","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1703558","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1703749","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1703904","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1703947","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1705243","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1707448","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1707524","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1707799","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1708187","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1708442","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1708552","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1709254","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1709626","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1710424","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1710723","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1712488","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1713211","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1717028","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1718458","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1718542","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1720466","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1720581","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhba-2019_1605.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-10320","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1714054","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-10320","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-10328","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1716794","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-10328","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-10328","tags":["advisory"]},{"url":"https://jenkins.io/security/advisory/2019-05-31/#SECURITY-921","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-1003049","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1699701","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-1003049","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-1003049","tags":["advisory"]},{"url":"https://jenkins.io/security/advisory/2019-04-10/#SECURITY-1289","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-1003050","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1699333","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-1003050","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-1003050","tags":["advisory"]},{"url":"https://jenkins.io/security/advisory/2019-04-10/#SECURITY-1327","tags":["article"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1719782","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1636.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-10337","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-10337","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-10337","tags":["advisory"]},{"url":"https://jenkins.io/security/advisory/2019-06-11/#SECURITY-1399","tags":["article"]}],"sources":{"cve":[{"id":"CVE-2019-10320","description":"Jenkins Credentials Plugin 2.1.18 and earlier allowed users with permission to create or update credentials to confirm the existence of files on the Jenkins master with an attacker-specified path, and obtain the certificate content of files containing a PKCS#12 certificate.","status":"published","published":"2019-05-21T13:00:22Z","modified":"2024-08-04T22:17:20.39Z","updated_at":"2026-11-02T14:20:18.746972Z"}],"euvd":[{"id":"EUVD-2022-5823","description":"Jenkins Credentials Plugin 2.1.18 and earlier allowed users with permission to create or update credentials to confirm the existence of files on the Jenkins master with an attacker-specified path, and obtain the certificate content of files containing a PKCS#12 certificate.","status":"published","published":"2019-05-21T13:00:22Z","modified":"2024-08-04T22:17:20Z","updated_at":"2026-11-03T02:40:52.601139Z"}],"ghsa":[{"id":"GHSA-xm94-9jw8-p6hw","title":"Insertion of Sensitive Information into Externally-Accessible File or Directory in Jenkins Credentials Plugin","description":"Jenkins Credentials Plugin 2.1.18 and earlier allowed users with permission to create or update credentials to confirm the existence of files on the Jenkins master with an attacker-specified path, and obtain the certificate content of files containing a PKCS#12 certificate.","status":"published","published":"2022-05-24T16:46:09Z","modified":"2023-12-13T10:00:22Z","cvss":[{"version":"3.0","score":4.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-200","CWE-538"],"updated_at":"2026-11-02T14:37:25.311671Z"}],"nvd":[{"id":"CVE-2019-10320","description":"Jenkins Credentials Plugin 2.1.18 and earlier allowed users with permission to create or update credentials to confirm the existence of files on the Jenkins master with an attacker-specified path, and obtain the certificate content of files containing a PKCS#12 certificate.","status":"published","published":"2019-05-21T13:29:00.397Z","modified":"2026-06-17T02:10:42.6Z","cvss":[{"version":"3.0","score":4.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-538"],"updated_at":"2026-11-02T14:05:13.880207Z"}],"osv":[{"id":"CVE-2019-10320","description":"Jenkins Credentials Plugin 2.1.18 and earlier allowed users with permission to create or update credentials to confirm the existence of files on the Jenkins master with an attacker-specified path, and obtain the certificate content of files containing a PKCS#12 certificate.","status":"published","published":"2019-05-21T13:29:00.397Z","modified":"2026-11-09T10:45:06.229887871Z","cvss":[{"version":"3.0","score":4.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-09T10:53:57.550641Z"},{"id":"GHSA-xm94-9jw8-p6hw","title":"Insertion of Sensitive Information into Externally-Accessible File or Directory in Jenkins Credentials Plugin","description":"Jenkins Credentials Plugin 2.1.18 and earlier allowed users with permission to create or update credentials to confirm the existence of files on the Jenkins master with an attacker-specified path, and obtain the certificate content of files containing a PKCS#12 certificate.","status":"published","published":"2022-05-24T16:46:09Z","modified":"2024-02-16T08:12:02.249418Z","cvss":[{"version":"3.0","score":4.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-200","CWE-538"],"updated_at":"2026-11-02T15:47:00.198893Z"},{"id":"RHBA-2019:1605","title":"Red Hat Bug Fix Advisory: OpenShift Container Platform 3.11 bug fix and enhancement update","status":"published","published":"2024-09-16T02:39:18Z","modified":"2026-06-27T10:06:37Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:58.117212Z"},{"id":"RHSA-2019:1636","title":"Red Hat Security Advisory: OpenShift Container Platform 4.1 jenkins-2-plugins security update","status":"published","published":"2024-09-16T02:41:52Z","modified":"2026-06-27T10:07:34Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.0195Z"}]}}