CVE-2018-1999028 - An exposure of sensitive information vulnerability exists in Jenkins Accurev Plugin 0.7.16 and earlier in AccurevSCM.java that allows attackers to capture credentials with a known credentials ID stored in Jenkins

Back Back to CVE browser

HIGH

An exposure of sensitive information vulnerability exists in Jenkins Accurev Plugin 0.7.16 and earlier in AccurevSCM.java that allows attackers to capture credentials with a known credentials ID stored in Jenkins

Published Aug 1, 2018

8.8

HIGH

CVSS 3.0

EPSS 1.12%

Description

An exposure of sensitive information vulnerability exists in Jenkins Accurev Plugin 0.7.16 and earlier in AccurevSCM.java that allows attackers to capture credentials with a known credentials ID stored in Jenkins.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-200

Exposure of Sensitive Information

References (5)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-3240
Advisory
https://github.com/advisories/GHSA-8vg7-gh73-866v
Advisory
https://github.com/jenkinsci/accurev-plugin/commit/a86e05f7747b8f7d483f61a840cfb7a1a0105eee
https://jenkins.io/security/advisory/2018-07-30/#SECURITY-1021
x_refsource_CONFIRMVendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-1999028

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-3240		Advisory
https://github.com/advisories/GHSA-8vg7-gh73-866v		Advisory
https://github.com/jenkinsci/accurev-plugin/commit/a86e05f7747b8f7d483f61a840cfb7a1a0105eee
https://jenkins.io/security/advisory/2018-07-30/#SECURITY-1021		x_refsource_CONFIRMVendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-1999028