En resumen
- CVE-2018-1999034 es una vulnerabilidad ALTO (CVSS 7.4) que afecta a com.inedo.proget:inedo-proget, inedo proget (jenkins).
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.79%, mayor que el 56.6% de las vulnerabilidades.
- Solución: actualizar a 1.0 o posterior.
Description
A man in the middle vulnerability exists in Jenkins Inedo ProGet Plugin 0.8 and earlier in ProGetApi.java, ProGetConfig.java, ProGetConfiguration.java that allows attackers to impersonate any service that Jenkins connects to.
NVD description
A man in the middle vulnerability exists in Jenkins Inedo ProGet Plugin 0.8 and earlier in ProGetApi.java, ProGetConfig.java, ProGetConfiguration.java that allows attackers to impersonate any service that Jenkins connects to.
Más vulnerabilidades de com.inedo.proget:inedo-proget
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free