CVE-2019-1003045 - A vulnerability in Jenkins ECS Publisher Plugin 1.0.0 and earlier allows attackers with Item/Extended Read permission, or local file system access to the Jenkins home directory to obtain the API token configured in this plugin's configuration

Back Back to CVE browser

MEDIUM

A vulnerability in Jenkins ECS Publisher Plugin 1.0.0 and earlier allows attackers with Item/Extended Read permission, or local file system access to the Jenkins home directory to obtain the API token configured in this plugin's configuration

Published Mar 28, 2019

6.5

MEDIUM

CVSS 3.1

EPSS 1.58%

Description

A vulnerability in Jenkins ECS Publisher Plugin 1.0.0 and earlier allows attackers with Item/Extended Read permission, or local file system access to the Jenkins home directory to obtain the API token configured in this plugin's configuration.

Affected products

Vendor Jenkins project Product Jenkins ECS Publisher Plugin Default
n/a
- Version
  1.0.0 and earlier
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Jenkins project

Jenkins ECS Publisher Plugin

n/a

Version	Status	Constraints
1.0.0 and earlier	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-522

Insufficiently Protected Credentials

References (5)

http://www.openwall.com/lists/oss-security/2019/03/28/2
mailing-listx_refsource_MLISTMailing ListThird Party Advisory
http://www.securityfocus.com/bid/107628
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://github.com/advisories/GHSA-ffj8-w4rj-vr7v
Advisory
https://jenkins.io/security/advisory/2019-03-25/#SECURITY-846
x_refsource_CONFIRMVendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-1003045

Link	Providers	Tags
http://www.openwall.com/lists/oss-security/2019/03/28/2		mailing-listx_refsource_MLISTMailing ListThird Party Advisory
http://www.securityfocus.com/bid/107628		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://github.com/advisories/GHSA-ffj8-w4rj-vr7v		Advisory
https://jenkins.io/security/advisory/2019-03-25/#SECURITY-846		x_refsource_CONFIRMVendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-1003045