CVE-2018-1000610

2018-06-26T13:29:00
ID CVE-2018-1000610
Type cve
Reporter NVD
Modified 2018-08-23T12:51:14

Description

A exposure of sensitive information vulnerability exists in Jenkins Configuration as Code Plugin 0.7-alpha and earlier in DataBoundConfigurator.java, Attribute.java, BaseConfigurator.java, ExtensionConfigurator.java that allows attackers with access to Jenkins log files to obtain the passwords configured using Configuration as Code Plugin.