CVE-2019-1003062

HIGH

Jenkins AWS CloudWatch Logs Publisher Plugin - Info Disclosure

Title source: llm
STIX 2.1

Description

Jenkins AWS CloudWatch Logs Publisher Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.

References (3)

Scores

CVSS v3 8.8
EPSS 0.0008
EPSS Percentile 23.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-311
Status published
Products (2)
jenkins/aws_cloudwatch_logs_publisher
org.jenkins-ci.plugins/aws-cloudwatch-logs-publisher 0Maven
Published Apr 04, 2019
Tracked Since Feb 18, 2026