CVE-2019-10397

LOW

Jenkins Aqua Security Serverless Scanner < 1.0.4 - Cleartext Transmission of Sensitive Information

Title source: llm
STIX 2.1

Description

Jenkins Aqua Security Serverless Scanner Plugin 1.0.4 and earlier transmitted configured passwords in plain text as part of job configuration forms, potentially resulting in their exposure.

References (2)

Core 2
Core References
Mailing List, Third Party Advisory mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2019/09/12/2

Scores

CVSS v3 3.1
EPSS 0.0003
EPSS Percentile 9.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

Details

CWE
CWE-319
Status published
Products (2)
jenkins/aqua_security_severless_scanner < 1.0.4
org.jenkins-ci.plugins/aqua-serverless 0 - 1.0.5Maven
Published Sep 12, 2019
Tracked Since Feb 18, 2026