{"action":"Upgrade org.jenkins-ci.plugins:neoload-jenkins-plugin to 2.2.6 or later.","affected":[{"fixed":"2.2.6","introduced":"0"}],"component":"org.jenkins-ci.plugins:neoload-jenkins-plugin","cve_ids":["CVE-2019-10440"],"ecosystem":"Maven","epss":0.01486,"exploited":false,"fixed_versions":["2.2.6"],"ghsa_id":"GHSA-98p6-6428-77v7","id":"tcs_01M5N8PJ6J52KZP7MA96ZDGZ2P","modified_at":"2024-02-17T05:43:52.987697Z","published_at":"2022-05-24T16:58:49Z","references":["https://osv.dev/vulnerability/GHSA-98p6-6428-77v7","https://nvd.nist.gov/vuln/detail/CVE-2019-10440","https://github.com/jenkinsci/neoload-plugin/commit/83c8300c8318502b4f4d4c802dd2a10cadfee4c9","https://github.com/jenkinsci/neoload-plugin","https://jenkins.io/security/advisory/2019-10-16/#SECURITY-1427","https://www.zerodayinitiative.com/advisories/ZDI-19-932","http://www.openwall.com/lists/oss-security/2019/10/16/6"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-98p6-6428-77v7","url":"https://osv.dev/vulnerability/GHSA-98p6-6428-77v7"}],"summary":"Jenkins NeoLoad Plugin stores credentials in cleartext"}