Lucene search
MitreCVELIST:CVE-2018-1000176HistoryOct 03, 2022 - 4:21 p.m.
CVE-2018-1000176
2022-10-0316:21:59
mitre
www.cve.org
jenkins
email extension
plugin
vulnerability
sensitive information
smtp password
0.001 Low
EPSS
Percentile
28.6%
An exposure of sensitive information vulnerability exists in Jenkins Email Extension Plugin 2.61 and older in src/main/resources/hudson/plugins/emailext/ExtendedEmailPublisher/global.groovy and ExtendedEmailPublisherDescriptor.java that allows attackers with control of a Jenkins administrator’s web browser (e.g. malicious extension) to retrieve the configured SMTP password.
References
Related
osv
osv
Jenkins Email Extension Plugin showed plain text SMTP password in configuration form field
2022-05-14 03:18:39
CVE-2018-1000176
2018-05-08 15:29:00
nvd
nvd
CVE-2018-1000176
2018-05-08 15:29:00
prion
prion
Design/Logic Flaw
2018-05-08 15:29:00
github
github
cve
cve
CVE-2018-1000176
2022-10-03 16:21:59
veracode
veracode
Sensitive Information Exposure
2018-05-09 04:28:22