CVE-2019-1003025

https://notcve.org/view.php?id=CVE-2019-1003025

20 Feb 2019 — A exposure of sensitive information vulnerability exists in Jenkins Cloud Foundry Plugin 2.3.1 and earlier in AbstractCloudFoundryPushDescriptor.java that allows attackers with Overall/Read access to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins. Existe una vulnerabilidad de exposición de información sensible en Jenkins Cloud Foundry Plugin, en versiones 2.3.1 y anteriores, en AbstractCloudFoundryPushDes... • http://www.securityfocus.com/bid/107295 • CWE-862: Missing Authorization •