Ecosyste.ms: Advisories

Security Advisories: GSA_kwCzR0hTQS1mcWcyLWM5N3ItcnFjas4AASyM

Exposure of Sensitive Information in Jenkins Kubernetes Plugin

An exposure of sensitive information vulnerability exists in Jenkins Kubernetes Plugin 1.10.1 and earlier in KubernetesCloud.java that allows attackers to capture credentials with a known credentials ID stored in Jenkins.

Permalink: https://github.com/advisories/GHSA-fqg2-c97r-rqcj
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1mcWcyLWM5N3ItcnFjas4AASyM
Source: GitHub Advisory Database
Origin: Unspecified
Severity: High
Classification: General
Published: over 1 year ago
Updated: 8 months ago

CVSS Score: 8.8
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Identifiers: GHSA-fqg2-c97r-rqcj, CVE-2018-1999040
References:

• https://nvd.nist.gov/vuln/detail/CVE-2018-1999040
• https://jenkins.io/security/advisory/2018-07-30/#SECURITY-1016
• https://github.com/advisories/GHSA-fqg2-c97r-rqcj

Affected Packages