An exposure of sensitive information vulnerability exists in Jenkins meliora-testlab Plugin 1.14 and earlier in TestlabNotifier.java that allows attackers with file system access to the Jenkins master to obtain the API key stored in this plugin's configuration.
References
Link | Resource |
---|---|
https://jenkins.io/security/advisory/2018-07-30/#SECURITY-847 | Vendor Advisory |
Configurations
Information
Published : 2018-08-01 06:29
Updated : 2018-10-01 11:27
NVD link : CVE-2018-1999031
Mitre link : CVE-2018-1999031
JSON object : View
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
Products Affected
jenkins
- meliora_testlab