CVE-2018-1999032 — A data modification vulnerability exists in Jenkins Agiletestware Pangolin Connector for TestRail Plugin 2.1 and earlier in GlobalConfig.java that allows attackers with Overall/Read permission to override this plugin's configuration by sending crafted HTTP requests to an unprotected endpoint

Back Back to CVE browser

MEDIUM

A data modification vulnerability exists in Jenkins Agiletestware Pangolin Connector for TestRail Plugin 2.1 and earlier in GlobalConfig.java that allows attackers with Overall/Read permission to override this plugin's configuration by sending crafted HTTP requests to an unprotected endpoint

Published Aug 1, 2018

6.5

MEDIUM

CVSS 3.0

EPSS 1.02%

Description

A data modification vulnerability exists in Jenkins Agiletestware Pangolin Connector for TestRail Plugin 2.1 and earlier in GlobalConfig.java that allows attackers with Overall/Read permission to override this plugin's configuration by sending crafted HTTP requests to an unprotected endpoint.

Affected products

Remediation

No remediation recorded yet.

Metrics

1.02% 0.01019

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.01019

Score over time

2021–2026

EPSS v1
EPSS v5
EPSS v2
EPSS v3

Percentile over time

EPSS v1
EPSS v5
EPSS v2
EPSS v3

Table of values (10 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	1.02% (0.01019)	62.04th	v5 (v2026.06.15)
Sep 20, 2026	1.02% (0.01019)	61.84th	v5 (v2026.06.15)
Jul 20, 2024	0.05% (0.00054)	22.36th	v3 (v2023.03.01)
Apr 25, 2024	0.05% (0.00054)	20.60th	v3 (v2023.03.01)
Feb 8, 2024	0.05% (0.00052)	17.77th	v3 (v2023.03.01)
Mar 7, 2023	0.05% (0.00054)	19.90th	v3 (v2023.03.01)
Mar 6, 2023	0.89% (0.00885)	27.89th	v2 (v2022.01.01)
Feb 4, 2022	0.89% (0.00885)	10.50th	v2 (v2022.01.01)
Feb 3, 2022	0.42% (0.00416)	10.04th	v5 (v2026.06.15)
Apr 14, 2021	0.42% (0.00416)	0.00th	v1

Weaknesses (1)

CWE-269

Improper Privilege Management

References (4)

https://github.com/advisories/GHSA-pwrm-8mvm-p2f2
Advisory
https://github.com/jenkinsci/pangolin-testrail-connector-plugin/commit/53dac4413cca6947566589c0d0f85dee0100ffd5
https://jenkins.io/security/advisory/2018-07-30/#SECURITY-995
x_refsource_CONFIRMThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-1999032

Link	Providers	Tags
https://github.com/advisories/GHSA-pwrm-8mvm-p2f2		Advisory
https://github.com/jenkinsci/pangolin-testrail-connector-plugin/commit/53dac4413cca6947566589c0d0f85dee0100ffd5
https://jenkins.io/security/advisory/2018-07-30/#SECURITY-995		x_refsource_CONFIRMThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-1999032