Medium
Security advisory
Jenkins elOyente Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2019-10424
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 05:07 UTC · Revision 1
Source evidence
Jenkins elOyente Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.
osv:CVE-2019-10424
Complete source record
{
"id": "2855598e456bdf9b881ea84c5ebc47f7ce7fba7de2d281060e5c8eeab9a86fc7",
"url": "https://osv.dev/vulnerability/CVE-2019-10424",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2019-10424",
"summary": "Jenkins elOyente Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.",
"evidence": "osv:CVE-2019-10424",
"products": [],
"severity": "medium",
"structured": {
"id": "CVE-2019-10424",
"aliases": [
"CVE-2019-10424",
"GHSA-jv62-6xvc-ccwh"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/jenkinsci/eloyente-plugin",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"last_affected": "f1fb8fefdf638fd30234075ae5828e20fe6b216e"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:jenkins:eloyente:*:*:*:*:*:jenkins:*:*",
"range": [
{
"introduced": "0"
},
{
"last_affected": "1.3"
}
],
"source": "CPE_RANGE"
}
]
}
}
],
"versions": [
"elOyente-1.3",
"elOyente-1.1",
"elOyente-1.0"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-10424.json"
}
}
],
"modified": "2026-10-24T10:30:24.813743153Z",
"provider": "osv",
"references": [
"https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1561"
],
"provider_metadata": {}
},
"related_cves": [
{
"value": "CVE-2019-10424",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 431225,
"published_at": "2019-09-25T16:15:11.867+00:00"
}