Vulnerability in Jenkins-Ci Subversion-Plugin

CVE-2013-6372

The Subversion plugin before 1.54 for Jenkins stores credentials using base64 encoding, which allows local users to obtain passwords and SSH private keys by reading a subversion.credentials file.

EPSS: 0.005 (39.8th percentile) — read the EPSS interpretation.

Affected products

Jenkins-ci Subversion-plugin — versions 1.0, 1.1, 1.2
N/a — versions n/a

Weakness classification (CWE)

CWE-255

References

secalert@redhat.com (x_refsource_CONFIRM, Vendor Advisory)
secalert@redhat.com (x_refsource_MISC)
secalert@redhat.com (x_refsource_CONFIRM, Exploit, Patch)