{"action":"No fix published. Pin and monitor.","affected":[],"component":"org.jenkins-ci.plugins:credentials-binding","cve_ids":["CVE-2019-1010241"],"ecosystem":"Maven","epss":0.01468,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-j7gw-mwfg-vqf4","id":"tcs_01M5N927Y3FP2ABSS8NYBJ3MMH","modified_at":"2025-03-12T16:27:11.892664Z","published_at":"2022-05-24T16:50:43Z","references":["https://osv.dev/vulnerability/GHSA-j7gw-mwfg-vqf4","https://nvd.nist.gov/vuln/detail/CVE-2019-1010241","https://docs.google.com/document/d/1MBEoJSMvkjp5Kua0bRD_kiDBisL0fOCwTL9uMWj4lGA/edit?usp=sharing","https://github.com/jenkinsci/credentials-binding-plugin","https://web.archive.org/web/20200227030005/https://www.securityfocus.com/bid/109320"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-j7gw-mwfg-vqf4","url":"https://osv.dev/vulnerability/GHSA-j7gw-mwfg-vqf4"}],"summary":"Jenkins Credentials Binding Plugin Stores Passwords in a Recoverable Format"}