CVE-2019-10452

FAUCET Score

CVE-2019-10452 describes a vulnerability in the Jenkins View26 Test-Reporting Plugin where credentials are stored unencrypted in job config.xml files on the Jenkins master. This allows users with Extended Read permission or direct file system access to view sensitive information. With a CVSS score of 4.3 (Medium), this vulnerability has a low attack complexity and requires low privileges, potentially leading to a loss of confidentiality. There is no known active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		<= 1.0.7CPE matchmatch criteria	cpe:2.3:a:jenkins:view26_test-reporting::::::jenkins::*

CVSS Data

CVSS version used by this source: 3.1

4.3MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

Exploitability Score

2.8

Impact Score

1.4

CvssVersion

3.1

Exploit Intelligence

EPSS Score

0.47%

Probability of exploitation in next 30 days

EPSS Percentile

38.0%

Percentile rank of EPSS score among Peer Group

As of 2026-07-27

Model: v2026.06.15

This CVE's current EPSS score of 0.0047 is in the 48th percentile among its peer group of 21,974 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Vendor Advisories (1)

mavenGHSA-5rc5-4c5c-4cwxmedium

Jenkins View26 Test-Reporting Plugin stores access token in plain text

May 24, 2022

References

jenkins.io / security/advisory/2019-10-16

Vendor Advisory