CVE-2017-1000113

The Deploy to container Plugin stored passwords unencrypted as part of its configuration. This allowed users with Jenkins master local file system access, or users with Extended Read access to the jobs it is used in, to retrieve those passwords. The Deploy to container Plugin now integrates with Credentials Plugin to store passwords securely, and automatically migrates existing passwords.

• CWE-200

• https://jenkins.io/security/advisory/2017-08-07/Vendor Advisory
• https://jenkins.io/security/advisory/2017-08-07/Vendor Advisory

Published

Oct 5, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-1000107Script Security Plugin did not apply sandboxing restrictions…
• CVE-2017-1000108The Pipeline: Input Step Plugin by default allowed users wit…
• CVE-2017-1000109The custom Details view of the Static Analysis Utilities bas…
• CVE-2017-1000110Blue Ocean allows the creation of GitHub organization folder…
• CVE-2017-1000111Linux kernel: heap out-of-bounds in AF_PACKET sockets. This …7.8
• CVE-2017-1000112Linux kernel: Exploitable memory corruption due to UFO to no…7
• CVE-2017-1000114The Datadog Plugin stores an API key to access the Datadog s…
• CVE-2017-1000115Mercurial prior to version 4.3 is vulnerable to a missing sy…
• CVE-2017-1000116Mercurial prior to 4.3 did not adequately sanitize hostnames…
• CVE-2017-1000117A malicious third-party can give a crafted "ssh://..." URL t…
• CVE-2017-1000118Akka HTTP versions <= 10.0.5 Illegal Media Range in Accept H…
• CVE-2017-1000119October CMS build 412 is vulnerable to PHP code execution in…