Lucene search
PRIOn knowledge basePRION:CVE-2018-1000423HistoryJan 09, 2019 - 11:29 p.m.
Design/Logic Flaw
2019-01-0923:29:00
PRIOn knowledge base
www.prio-n.com
5
An insufficiently protected credentials vulnerability exists in Jenkins Crowd 2 Integration Plugin 2.0.0 and earlier in CrowdSecurityRealm.java, CrowdConfigurationService.java that allows attackers with local file system access to obtain the credentials used to connect to Crowd 2.
Related
cve
cve
CVE-2018-1000423
2019-01-09 23:29:02
github
github
Jenkins Crowd 2 Integration Plugin stored credentials in plain text
2022-05-13 01:18:46
osv
osv
Jenkins Crowd 2 Integration Plugin stored credentials in plain text
2022-05-13 01:18:46
cvelist
cvelist
CVE-2018-1000423
2019-01-09 23:00:00
nvd
nvd
CVE-2018-1000423
2019-01-09 23:29:02