En resumen
- CVE-2018-1999030 es una vulnerabilidad MEDIO (CVSS 5.4) que afecta a org.jenkins-ci.plugins:maven-artifact-choicelistprovider, maven artifact choicelistprovider (nexus) (jenkins).
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.68%, mayor que el 52.5% de las vulnerabilidades.
- Solución: actualizar a 1.3.2 o posterior.
Description
An exposure of sensitive information vulnerability exists in Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin 1.3.1 and earlier in ArtifactoryChoiceListProvider.java, NexusChoiceListProvider.java, Nexus3ChoiceListProvider.java that allows attackers to capture credentials with a known credentials ID stored in Jenkins.
NVD description
An exposure of sensitive information vulnerability exists in Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin 1.3.1 and earlier in ArtifactoryChoiceListProvider.java, NexusChoiceListProvider.java, Nexus3ChoiceListProvider.java that allows attackers to capture credentials with a known credentials ID stored in Jenkins.
Más vulnerabilidades de org.jenkins-ci.plugins:maven-artifact-choicelistprovider
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free