Design/Logic Flaw

2018-04-0513:29:00

PRIOn knowledge base

www.prio-n.com

7.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

An exposure of sensitive information vulnerability exists in Jenkins GitHub Pull Request Builder Plugin version 1.39.0 and older in GhprbCause.java that allows an attacker with local file system access to obtain GitHub credentials.

CPENameOperatorVersion
github_pull_request_builderle1.39.0

CPE	Name	Operator	Version
	github_pull_request_builder	le	1.39.0

References

jenkins.io/security/advisory/2018-03-26/