CVE-2019-1003048

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

A vulnerability in Jenkins PRQA Plugin 3.1.0 and earlier allows attackers with local file system access to the Jenkins home directory to obtain the unencrypted password from the plugin configuration.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-311

Affected software

Vendor	Product	Versions
Jenkins project	Jenkins PRQA Plugin	3.1.0 and earlier

References

http://www.openwall.com/lists/oss-security/2019/03/28/2Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/107628Third Party Advisory, VDB Entry
https://jenkins.io/security/advisory/2019-03-25/#SECURITY-1089Vendor Advisory
http://www.openwall.com/lists/oss-security/2019/03/28/2Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/107628Third Party Advisory, VDB Entry
https://jenkins.io/security/advisory/2019-03-25/#SECURITY-1089Vendor Advisory

Timeline

Published: Mar 28, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019