{"id":"CVE-2024-39459","state":"PUBLISHED","title":"In rare cases Jenkins Plain Credentials Plugin 182.v468b_97b_9dcb_8 and earlier stores secret file credentials unencrypted (only Base64 encoded) on the Jenkins controller file syst","description":"In rare cases Jenkins Plain Credentials Plugin 182.v468b_97b_9dcb_8 and earlier stores secret file credentials unencrypted (only Base64 encoded) on the Jenkins controller file system, where they can be viewed by users with access to the Jenkins controller file system (global credentials) or with Item/Extended Read permission (folder-scoped credentials).","publishedAt":"2024-06-26T17:06:27.043Z","updatedAt":"2025-02-13T17:53:17.283Z","severity":{"score":4.3,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","source":"CISA-ADP"},"assigner":"jenkins","products":["Jenkins Project Jenkins Plain Credentials Plugin"],"affected":[{"vendor":"Jenkins Project","product":"Jenkins Plain Credentials Plugin","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"182.v468b_97b_9dcb_8","versionType":"maven"}]}],"references":["https://www.jenkins.io/security/advisory/2024-06-26/#SECURITY-2495","http://www.openwall.com/lists/oss-security/2024/06/26/2"],"weaknesses":["CWE-922"],"ingestedAt":"2026-10-29T20:07:39.287Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/39xxx/CVE-2024-39459.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-39459","state":"PUBLISHED","datePublished":"2024-06-26T17:06:27.043Z","dateUpdated":"2025-02-13T17:53:17.283Z","assignerShortName":"jenkins","assignerOrgId":"39769cd5-e6e2-4dc8-927e-97b3aa056f5b","dateReserved":"2024-06-25T08:12:57.626Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"In rare cases Jenkins Plain Credentials Plugin 182.v468b_97b_9dcb_8 and earlier stores secret file credentials unencrypted (only Base64 encoded) on the Jenkins controller file system, where they can be viewed by users with access to the Jenkins controller file system (global credentials) or with Item/Extended Read permission (folder-scoped credentials)."}],"affected":[{"vendor":"Jenkins Project","product":"Jenkins Plain Credentials Plugin","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"182.v468b_97b_9dcb_8","versionType":"maven"}]}],"references":[{"url":"https://www.jenkins.io/security/advisory/2024-06-26/#SECURITY-2495","name":"Jenkins Security Advisory 2024-06-26","tags":["vendor-advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2024/06/26/2"}],"providerMetadata":{"shortName":"jenkins","orgId":"39769cd5-e6e2-4dc8-927e-97b3aa056f5b","dateUpdated":"2024-06-26T17:10:07.771Z"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"timestamp":"2024-06-26T18:32:42.860915Z","id":"CVE-2024-39459","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-922","type":"CWE","lang":"en","description":"CWE-922 Insecure Storage of Sensitive Information"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-11-01T16:37:18.477Z"}},{"title":"CVE Program Container","references":[{"url":"https://www.jenkins.io/security/advisory/2024-06-26/#SECURITY-2495","name":"Jenkins Security Advisory 2024-06-26","tags":["vendor-advisory","x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2024/06/26/2","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T04:26:14.969Z"}}]}}}