Lucene search
MitreCVELIST:CVE-2018-1000423HistoryJan 09, 2019 - 11:00 p.m.
CVE-2018-1000423
2019-01-0923:00:00
mitre
www.cve.org
0.0004 Low
EPSS
Percentile
5.1%
An insufficiently protected credentials vulnerability exists in Jenkins Crowd 2 Integration Plugin 2.0.0 and earlier in CrowdSecurityRealm.java, CrowdConfigurationService.java that allows attackers with local file system access to obtain the credentials used to connect to Crowd 2.
Related
cve
cve
CVE-2018-1000423
2019-01-09 23:29:02
github
github
Jenkins Crowd 2 Integration Plugin stored credentials in plain text
2022-05-13 01:18:46
prion
prion
Design/Logic Flaw
2019-01-09 23:29:00
osv
osv
Jenkins Crowd 2 Integration Plugin stored credentials in plain text
2022-05-13 01:18:46
nvd
nvd
CVE-2018-1000423
2019-01-09 23:29:02