Lucene search

K
cvelistMitreCVELIST:CVE-2018-1000190
HistoryJun 05, 2018 - 8:00 p.m.

CVE-2018-1000190

2018-06-0520:00:00
mitre
www.cve.org
4
jenkins
black duck hub plugin
vulnerability
sensitive information
exposure
overall/read access
url
credentials

EPSS

0.001

Percentile

28.4%

A exposure of sensitive information vulnerability exists in Jenkins Black Duck Hub Plugin 4.0.0 and older in PostBuildScanDescriptor.java that allows attackers with Overall/Read access to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.

EPSS

0.001

Percentile

28.4%

Related for CVELIST:CVE-2018-1000190