CVE-2019-1003018

🗓️ 06 Feb 2019 16:00:00Reported by jenkinsType

cve🔗 web.nvd.nist.gov👁 61 Views🌐 WEB

An exposure of sensitive information vulnerability in Jenkins GitHub Authentication Plugin 0.2

Reporter	Title	Published	Views	Family All 10
Cvelist	CVE-2019-1003018	6 Feb 201916:00	–	cvelist
EUVD	EUVD-2022-3138	3 Oct 202520:07	–	euvd
Github Security Blog	GitHub Authentication Plugin showed plain text client secret in configuration form	13 May 202201:31	–	github
NVD	CVE-2019-1003018	6 Feb 201916:29	–	nvd
OSV	GHSA-87PJ-9Q82-M9QH GitHub Authentication Plugin showed plain text client secret in configuration form	13 May 202201:31	–	osv
Prion	Design/Logic Flaw	6 Feb 201916:29	–	prion
Positive Technologies	PT-2019-11316 · Jenkins · Jenkins Gitlab Authentication Plugin +1	6 Feb 201900:00	–	ptsecurity
RedhatCVE	CVE-2019-1003018	22 May 202504:08	–	redhatcve
Jenkins Security Advisories	GitHub Authentication Plugin showed plain text client secret in configuration form	28 Jan 201900:00	–	jenkins
vulnersOsv	com.groupon.jenkins-ci.plugins:DotCi (>=1.0.0 <=2.27.0), com.groupon.jenkins-ci.plugins:DotCi-DockerPublish (>=1.0.0 <=1.0.3) +5 more potentially affected by CVE-2019-1003018 via org.jenkins-ci.plugins:github-oauth (>=0.14 <=0.20)	13 May 202201:31	–	vulnersosv

NVD

Node

jenkins github_oauthRange≤0.29jenkins

[
  {
    "product": "Jenkins GitHub Authentication Plugin",
    "vendor": "Jenkins project",
    "versions": [
      {
        "status": "affected",
        "version": "0.29 and earlier"
      }
    ]
  }
]

Source	Link
jenkins	www.jenkins.io/security/advisory/2019-01-28/

Parameter	Position	Path	Description	CWE
clientSecret	path	GithubSecurityRealm/config.jelly	Exposure of sensitive information via GithubSecurityRealm/config.jelly allowing retrieval of the configured client secret.	CWE-200

17 Jun 2026 02:09Current

4.4Medium risk

Vulners AI Score4.4

CVSS 34.3

CVSS 24.3

EPSS0.01131

CWE-200