CVE-2019-10320

Publication date

2019-05-21 13:00:22

Family

jenkins

State

PUBLISHED

Description

Jenkins Credentials Plugin 2.1.18 and earlier allowed users with permission to create or update credentials to confirm the existence of files on the Jenkins master with an attacker-specified path, and obtain the certificate content of files containing a PKCS#12 certificate.