CVE-2018-1999025

2018-08-0113:29:00

Google

osv.dev

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

49.0%

JSON

A man in the middle vulnerability exists in Jenkins TraceTronic ECU-TEST Plugin 2.3 and earlier in ATXPublisher.java, ATXValidator.java that allows attackers to impersonate any service that Jenkins connects to.

CPENameOperatorVersion
ecutest-plugineqecutest-2.2
ecutest-plugineqecutest-2.1
ecutest-plugineqecutest-1.16
ecutest-plugineqecutest-1.17
ecutest-plugineqecutest-1.7
ecutest-plugineqecutest-1.18
ecutest-plugineqecutest-1.0
ecutest-plugineqecutest-1.8
ecutest-plugineqecutest-1.2
ecutest-plugineqecutest-1.10

Name	Operator	Version
ecutest-plugin	eq	ecutest-2.2
ecutest-plugin	eq	ecutest-2.1
ecutest-plugin	eq	ecutest-1.16
ecutest-plugin	eq	ecutest-1.17
ecutest-plugin	eq	ecutest-1.7
ecutest-plugin	eq	ecutest-1.18
ecutest-plugin	eq	ecutest-1.0
ecutest-plugin	eq	ecutest-1.8
ecutest-plugin	eq	ecutest-1.2
ecutest-plugin	eq	ecutest-1.10