CVE-2018-1999031 - An exposure of sensitive information vulnerability exists in Jenkins meliora-testlab Plugin 1.14 and earlier in TestlabNotifier.java that allows attackers with file system access to the Jenkins master to obtain the API key stored in this plugin's configuration

Back Back to CVE browser

MEDIUM

An exposure of sensitive information vulnerability exists in Jenkins meliora-testlab Plugin 1.14 and earlier in TestlabNotifier.java that allows attackers with file system access to the Jenkins master to obtain the API key stored in this plugin's configuration

Published Aug 1, 2018

6.5

MEDIUM

CVSS 3.0

EPSS 0.93%

Description

An exposure of sensitive information vulnerability exists in Jenkins meliora-testlab Plugin 1.14 and earlier in TestlabNotifier.java that allows attackers with file system access to the Jenkins master to obtain the API key stored in this plugin's configuration.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-200

Exposure of Sensitive Information

References (4)

https://github.com/advisories/GHSA-3hw6-gc8h-9243
Advisory
https://github.com/jenkinsci/meliora-testlab-plugin/commit/59d43d557aafcc4818439e01aa736fdeeb7f24d7
https://jenkins.io/security/advisory/2018-07-30/#SECURITY-847
x_refsource_CONFIRMVendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-1999031

Link	Providers	Tags
https://github.com/advisories/GHSA-3hw6-gc8h-9243		Advisory
https://github.com/jenkinsci/meliora-testlab-plugin/commit/59d43d557aafcc4818439e01aa736fdeeb7f24d7
https://jenkins.io/security/advisory/2018-07-30/#SECURITY-847		x_refsource_CONFIRMVendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-1999031