CVE-2018-1000420

2019-01-0923:29:02

Google

osv.dev

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.6%

JSON

An improper authorization vulnerability exists in Jenkins Mesos Plugin 0.17.1 and earlier in MesosCloud.java that allows attackers with Overall/Read access to obtain credentials IDs for credentials stored in Jenkins.

CPENameOperatorVersion
mesos-plugineqmesos-0.13.1
mesos-plugineqmesos-0.7.0
mesos-plugineqmesos-0.16
mesos-plugineqmesos-0.1.0
mesos-plugineqmesos-0.11.0
mesos-plugineqmesos-0.14.0
mesos-plugineqmesos-0.15.0
mesos-plugineqmesos-0.4.0
mesos-plugineqmesos-0.10.0-beta-1
mesos-plugineqmesos-0.5.0

Name	Operator	Version
mesos-plugin	eq	mesos-0.13.1
mesos-plugin	eq	mesos-0.7.0
mesos-plugin	eq	mesos-0.16
mesos-plugin	eq	mesos-0.1.0
mesos-plugin	eq	mesos-0.11.0
mesos-plugin	eq	mesos-0.14.0
mesos-plugin	eq	mesos-0.15.0
mesos-plugin	eq	mesos-0.4.0
mesos-plugin	eq	mesos-0.10.0-beta-1
mesos-plugin	eq	mesos-0.5.0