CVE-2019-1003045: Insufficiently Protected Credentials

May 13, 2022 (updated January 30, 2024)

A vulnerability in Jenkins ECS Publisher Plugin 1.0.0 and earlier allows attackers with Item/Extended Read permission, or local file system access to the Jenkins home directory to obtain the API token configured in this plugin’s configuration.

References

www.openwall.com/lists/oss-security/2019/03/28/2
www.securityfocus.com/bid/107628
github.com/advisories/GHSA-ffj8-w4rj-vr7v
jenkins.io/security/advisory/2019-03-25/
nvd.nist.gov/vuln/detail/CVE-2019-1003045

Code Behaviors & Features

Detect and mitigate CVE-2019-1003045 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →