CVE-2018-1000191

A exposure of sensitive information vulnerability exists in Jenkins Black Duck Detect Plugin 1.4.0 and older in DetectPostBuildStepDescriptor.java that allows attackers with Overall/Read access to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
References
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:jenkins:synopsys_detect:*:*:*:*:*:jenkins:*:*

Information

Published : 2018-06-05 13:29

Updated : 2019-04-16 09:04


NVD link : CVE-2018-1000191

Mitre link : CVE-2018-1000191


JSON object : View

CWE
CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

Advertisement

dedicated server usa

Products Affected

jenkins

  • synopsys_detect