CVE-2018-1999033

2018-08-0113:29:00

Google

osv.dev

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.4%

JSON

An exposure of sensitive information vulnerability exists in Jenkins Anchore Container Image Scanner Plugin 10.16 and earlier in AnchoreBuilder.java that allows attackers with Item/ExtendedRead permission or file system access to the Jenkins master to obtain the password stored in this plugin’s configuration.

CPENameOperatorVersion
anchore-container-scanner-plugineqanchore-container-scanner-1.0.8
anchore-container-scanner-plugineqanchore-container-scanner-1.0.12
anchore-container-scanner-plugineqanchore-container-scanner-1.0.7
anchore-container-scanner-plugineqanchore-container-scanner-1.0.9
anchore-container-scanner-plugineqanchore-container-scanner-1.0.11
anchore-container-scanner-plugineqanchore-container-scanner-1.0.14
anchore-container-scanner-plugineqanchore-container-scanner-1.0.10
anchore-container-scanner-plugineqanchore-container-scanner-1.0.1
anchore-container-scanner-plugineqanchore-container-scanner-1.0.13
anchore-container-scanner-plugineqanchore-container-scanner-1.0.2

Name	Operator	Version
anchore-container-scanner-plugin	eq	anchore-container-scanner-1.0.8
anchore-container-scanner-plugin	eq	anchore-container-scanner-1.0.12
anchore-container-scanner-plugin	eq	anchore-container-scanner-1.0.7
anchore-container-scanner-plugin	eq	anchore-container-scanner-1.0.9
anchore-container-scanner-plugin	eq	anchore-container-scanner-1.0.11
anchore-container-scanner-plugin	eq	anchore-container-scanner-1.0.14
anchore-container-scanner-plugin	eq	anchore-container-scanner-1.0.10
anchore-container-scanner-plugin	eq	anchore-container-scanner-1.0.1
anchore-container-scanner-plugin	eq	anchore-container-scanner-1.0.13
anchore-container-scanner-plugin	eq	anchore-container-scanner-1.0.2