CVE-2019-1003039
HIGHJenkinsAppDynamics Dashboard Plugin <1.0.14 - Info Disclosure
Title source: llmDescription
An insufficiently protected credentials vulnerability exists in JenkinsAppDynamics Dashboard Plugin 1.0.14 and earlier in src/main/java/nl/codecentric/jenkins/appd/AppDynamicsResultsPublisher.java that allows attackers without permission to obtain passwords configured in jobs to obtain them.
Scores
CVSS v3
8.8
EPSS
0.0007
EPSS Percentile
20.5%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Classification
CWE
CWE-522
Status
published
Affected Products (2)
jenkins/appdynamics
< 1.0.14
org.jenkins-ci.plugins/appdynamics-dashboard
< 1.0.15Maven
Timeline
Published
Mar 08, 2019
Tracked Since
Feb 18, 2026