CVE-2018-1000109 - An improper authorization vulnerability exists in Jenkins Google Play Android Publisher Plugin version 1.6 and earlier in GooglePlayBuildStepDescriptor.java that allow an attacker to obtain credential IDs

Back Back to CVE browser

MEDIUM

An improper authorization vulnerability exists in Jenkins Google Play Android Publisher Plugin version 1.6 and earlier in GooglePlayBuildStepDescriptor.java that allow an attacker to obtain credential IDs

Published Mar 13, 2018

4.3

MEDIUM

CVSS 3.0

EPSS 0.66%

Description

An improper authorization vulnerability exists in Jenkins Google Play Android Publisher Plugin version 1.6 and earlier in GooglePlayBuildStepDescriptor.java that allow an attacker to obtain credential IDs.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-863

Incorrect Authorization

References (4)

https://github.com/advisories/GHSA-rvx4-gg8w-qw24
Advisory
https://github.com/jenkinsci/google-play-android-publisher-plugin/commit/f81b058289caf3332ae40d599a36a3665b1fa13c
https://jenkins.io/security/advisory/2018-02-26/#SECURITY-715
x_refsource_CONFIRMVendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-1000109

Link	Providers	Tags
https://github.com/advisories/GHSA-rvx4-gg8w-qw24		Advisory
https://github.com/jenkinsci/google-play-android-publisher-plugin/commit/f81b058289caf3332ae40d599a36a3665b1fa13c
https://jenkins.io/security/advisory/2018-02-26/#SECURITY-715		x_refsource_CONFIRMVendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-1000109