CVSS 3.1
5.5 mediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NCVE-2019-10361
Medium (5.5) in jenkins m2release. EPSS 0.5% chance of exploitation in the next 30 days. Fixed in org.jenkins-ci.plugins.m2release:m2release 0.15.0.
Jenkins Maven Release Plugin 0.14.0 and earlier stored credentials unencrypted on the Jenkins master where they could be viewed by users with access to the master file system.
Severity
- EPSS
- 0.5% chance of exploitation in the next 30 days; higher than 40% of CVEs (scores of 2026-10-31)
- CWE
- CWE-522
- Published
- Modified
- Record from
- the NVD, synced
Affected
- jenkins:m2release
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-vwx8-qpqh-qwm9 | Maven | org.jenkins-ci.plugins.m2release:m2release | <0.15.0 | 0.15.0 |