CVE-2019-10320

—

CVSS 3.0

4.3 medium

EPSS

<1%p60

Published

May 21, 2019 (May 21, 2019)

Modified

Jun 17, 2026

Description

Jenkins Credentials Plugin 2.1.18 and earlier allowed users with permission to create or update credentials to confirm the existence of files on the Jenkins master with an attacker-specified path, and obtain the certificate content of files containing a PKCS#12 certificate.

Vendors: jenkins
Products: credentials
Weakness: CWE-538
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.0%)

In the news0 stories

No ingested article mentions this CVE yet.