En bref
- CVE-2018-1999030 est une vulnérabilité MOYENNE (CVSS 5.4) touchant org.jenkins-ci.plugins:maven-artifact-choicelistprovider, maven artifact choicelistprovider (nexus) (jenkins).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.68%, plus élevée que 52.5% des vulnérabilités.
- Correctif : mettre à jour vers 1.3.2 ou plus récent.
Description
An exposure of sensitive information vulnerability exists in Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin 1.3.1 and earlier in ArtifactoryChoiceListProvider.java, NexusChoiceListProvider.java, Nexus3ChoiceListProvider.java that allows attackers to capture credentials with a known credentials ID stored in Jenkins.
NVD description
An exposure of sensitive information vulnerability exists in Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin 1.3.1 and earlier in ArtifactoryChoiceListProvider.java, NexusChoiceListProvider.java, Nexus3ChoiceListProvider.java that allows attackers to capture credentials with a known credentials ID stored in Jenkins.
Autres vulnérabilités de org.jenkins-ci.plugins:maven-artifact-choicelistprovider
Tout voir →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free