En resumen
- CVE-2018-1000402 es una vulnerabilidad MEDIO (CVSS 4.3) que afecta a com.amazonaws:codedeploy, aws codedeploy (jenkins).
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.97%, mayor que el 61.9% de las vulnerabilidades.
- Solución: actualizar a 1.20 o posterior.
Description
Jenkins project Jenkins AWS CodeDeploy Plugin version 1.19 and earlier contains a File and Directory Information Exposure vulnerability in AWSCodeDeployPublisher.java that can result in Disclosure of environment variables. This vulnerability appears to have been fixed in 1.20 and later.
NVD description
Jenkins project Jenkins AWS CodeDeploy Plugin version 1.19 and earlier contains a File and Directory Information Exposure vulnerability in AWSCodeDeployPublisher.java that can result in Disclosure of environment variables. This vulnerability appears to have been fixed in 1.20 and later.
Más vulnerabilidades de com.amazonaws:codedeploy
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free