Lucene search

K
osvGoogleOSV:CVE-2018-1000418
HistoryJan 09, 2019 - 11:29 p.m.

CVE-2018-1000418

2019-01-0923:29:02
Google
osv.dev
8

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

40.3%

An improper authorization vulnerability exists in Jenkins HipChat Plugin 2.2.0 and earlier in HipChatNotifier.java that allows attackers with Overall/Read access to send test notifications to an attacker-specified HipChat server with attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

40.3%

Related for OSV:CVE-2018-1000418