Kurz gesagt
- CVE-2018-1999030 ist eine Schwachstelle (MITTEL (CVSS 5.4)) in org.jenkins-ci.plugins:maven-artifact-choicelistprovider, maven artifact choicelistprovider (nexus) (jenkins).
- Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.68%, höher als bei 52.5% aller Schwachstellen.
- Abhilfe: auf 1.3.2 oder neuer aktualisieren.
Description
An exposure of sensitive information vulnerability exists in Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin 1.3.1 and earlier in ArtifactoryChoiceListProvider.java, NexusChoiceListProvider.java, Nexus3ChoiceListProvider.java that allows attackers to capture credentials with a known credentials ID stored in Jenkins.
NVD description
An exposure of sensitive information vulnerability exists in Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin 1.3.1 and earlier in ArtifactoryChoiceListProvider.java, NexusChoiceListProvider.java, Nexus3ChoiceListProvider.java that allows attackers to capture credentials with a known credentials ID stored in Jenkins.
Weitere Schwachstellen in org.jenkins-ci.plugins:maven-artifact-choicelistprovider
Alle anzeigen →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free