CVE-2019-10320: Jenkins Credentials

Medium severity, CVSS 4.3. EPSS: 1% chance of exploitation in the next 30 days.

Jenkins Credentials Plugin 2.1.18 and earlier allowed users with permission to create or update credentials to confirm the existence of files on the Jenkins master with an attacker-specified path, and obtain the certificate content of files containing a PKCS#12 certificate.

Affected products

• Jenkins Credentials: up to and including 2.1.18

Published 2019-05-21. Last modified 2026-06-17.