In short
- CVE-2018-1000145 is a MEDIUM (CVSS 6.5) vulnerability affecting org.jvnet.hudson.plugins:perforce, perforce (jenkins).
- Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 66.2% of all vulnerabilities.
- No patched version is listed yet: follow the vendor's advisory in References.
Description
An exposure of sensitive information vulnerability exists in Jenkins Perforce Plugin version 1.3.36 and older in PerforcePasswordEncryptor.java that allows attackers with local file system access to obtain encrypted Perforce passwords and decrypt them.
NVD description
An exposure of sensitive information vulnerability exists in Jenkins Perforce Plugin version 1.3.36 and older in PerforcePasswordEncryptor.java that allows attackers with local file system access to obtain encrypted Perforce passwords and decrypt them.
More vulnerabilities in org.jvnet.hudson.plugins:perforce
See all →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free