Local File System Access Vulnerability in Jenkins PRQA Plugin 3.1.0 and Earlier

CVE-2019-1003048 · HIGH Severity

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A vulnerability in Jenkins PRQA Plugin 3.1.0 and earlier allows attackers with local file system access to the Jenkins home directory to obtain the unencrypted password from the plugin configuration.

Learn more about our Web Application Penetration Testing UK.