CVE Daily

CVE-2013-5676

The Jenkins Plugin for SonarQube 3.7 and earlier allows remote authenticated use...

Medium CVSS 4.0

Overview

The Jenkins Plugin for SonarQube 3.7 and earlier allows remote authenticated users to obtain sensitive information (cleartext passwords) by reading the value in the sonar.sonarPassword parameter from jenkins/configure.

CWE: CWE-310 Published: 2013-12-13T18:55:04.800
Risk analysis

This vulnerability is rated 🟡 MEDIUM.

  • CVSS: 4.0 (MEDIUM)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags