Em resumo
- CVE-2018-1000145 é uma vulnerabilidade MÉDIO (CVSS 6.5) que afeta org.jvnet.hudson.plugins:perforce, perforce (jenkins).
- Chance de exploração nos próximos 30 dias (EPSS): 1.1%, maior que 66.2% das vulnerabilidades.
- Ainda não há versão corrigida: acompanhe o aviso do fornecedor em Referências.
Description
An exposure of sensitive information vulnerability exists in Jenkins Perforce Plugin version 1.3.36 and older in PerforcePasswordEncryptor.java that allows attackers with local file system access to obtain encrypted Perforce passwords and decrypt them.
NVD description
An exposure of sensitive information vulnerability exists in Jenkins Perforce Plugin version 1.3.36 and older in PerforcePasswordEncryptor.java that allows attackers with local file system access to obtain encrypted Perforce passwords and decrypt them.
Mais vulnerabilidades de org.jvnet.hudson.plugins:perforce
Ver tudo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free