CVE-2018-1000147 - An exposure of sensitive information vulnerability exists in Jenkins Perforce Plugin version 1.3.36 and older in PerforcePasswordEncryptor.java that allows attackers with insufficient permission to obtain Perforce passwords configured in jobs to obtain them

Back Back to CVE browser

MEDIUM

An exposure of sensitive information vulnerability exists in Jenkins Perforce Plugin version 1.3.36 and older in PerforcePasswordEncryptor.java that allows attackers with insufficient permission to obtain Perforce passwords configured in jobs to obtain them

Published Apr 5, 2018

6.5

MEDIUM

CVSS 3.0

EPSS 0.84%

Description

An exposure of sensitive information vulnerability exists in Jenkins Perforce Plugin version 1.3.36 and older in PerforcePasswordEncryptor.java that allows attackers with insufficient permission to obtain Perforce passwords configured in jobs to obtain them

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-200

Exposure of Sensitive Information

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-4427
Advisory
https://github.com/advisories/GHSA-jrhw-r343-pjwj
Advisory
https://jenkins.io/security/advisory/2018-03-26/#SECURITY-536
x_refsource_CONFIRMVendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-1000147

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-4427		Advisory
https://github.com/advisories/GHSA-jrhw-r343-pjwj		Advisory
https://jenkins.io/security/advisory/2018-03-26/#SECURITY-536		x_refsource_CONFIRMVendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-1000147