CVE-2019-1003045

MEDIUM

A vulnerability in Jenkins ECS Publisher Plugin 1.0.0 and earlier allows attackers with Item/Extended Read permission, or local file system access to the Jenkins home directory to obtain the API to...

Affects 1 product across 1 vendor.

CVSS 3.16.5
EPSS1.6%
Percentile75th
PatchPatched
CVSS Vector — Plain English Remotely exploitable over the network, low complexity, low privileges required, no user interaction needed, impact contained to the vulnerable component, full confidentiality impact, no integrity impact, no availability impact.
CWE Weakness Definitions
CWE-522: CWE-522
Related Attack Patterns (CAPEC)
CAPEC-102 Session Sidejacking
via CWE-522
CAPEC-474 Signature Spoofing by Key Theft
via CWE-522
CAPEC-509 Kerberoasting
via CWE-522
CAPEC-551 Modify Existing Service
via CWE-522
CAPEC-561 Windows Admin Shares with Stolen Credentials
via CWE-522
Show all 13

Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.

◆ AI Analysis — automated analysis, not human-reviewed

This vulnerability was disclosed in 2019. A medium severity vulnerability affects Trustsource systems (CVE-2019-1003045). No public exploit code is currently available. Isolate affected systems if patching is not feasible.

BSID: BS-2019-GLOBAL-132918-M • Model: rule-based-v1 • Confidence: MEDIUM

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2019-1003045?
This vulnerability was disclosed in 2019. A medium severity vulnerability affects Trustsource systems (CVE-2019-1003045). No public exploit code is currently available. Isolate affected systems if patching is not feasible.
What is the CVSS score for CVE-2019-1003045?
CVE-2019-1003045 has CVSS 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N. EPSS: 1.6%.
Is CVE-2019-1003045 actively exploited?
No confirmed active exploitation of CVE-2019-1003045 as of 2026-05-30.
How do I remediate CVE-2019-1003045?
Priority: MONITOR. PSIRT: [email protected]
What systems are affected by CVE-2019-1003045?
CVE-2019-1003045 affects Trustsource Ecs Publisher.
Vulnerability Details
CVE IDCVE-2019-1003045
BSIDBS-2019-GLOBAL-132918-M BreachSpider Global ID
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Published2019-03-28
Last Modified2024-11-21
ICS Relevance0%
Weakness (CWE)
CWE-522
SourceNVD
Official Description

A vulnerability in Jenkins ECS Publisher Plugin 1.0.0 and earlier allows attackers with Item/Extended Read permission, or local file system access to the Jenkins home directory to obtain the API token configured in this plugin's configuration.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

Vulnerability details: A vulnerability in Jenkins ECS Publisher Plugin 1.0.0 and earlier allows attackers with Item/Extended Read permission, or local file system access to the Jenkins home directory to obtain the API token configured in this plugin's configuration. CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.

Exploitation Likelihood: MINIMAL

Affected Products
VendorProductAffected Versions
Trustsource Ecs Publisher ≤ 1.0.0
Remediation

No official vendor advisory link on record. See the CVE record →

Vendor PSIRT: [email protected]
Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 2758 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Modelrule-based-v1
ConfidenceMEDIUM
Enriched At2026-05-24
SHA-512 Audit Hash42f26b33806db8ad6acb91987b06ee840bff516ef41b51b2600e10eb39ec5fe72414bf652c4559b89d3209f379558d540a0aa98e020875441a0ef8f48c287e6e

ICS/OT Vulnerability Intelligence for Your Environment

BreachSpider tracks 384,000+ CVEs and matches them to your ICS/OT assets by exact version, with AI analysis, NERC CIP mapping, and vendor PSIRT contacts.

Create a free account →