Design/Logic Flaw

2018-08-0113:29:00

PRIOn knowledge base

www.prio-n.com

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.6%

JSON

An exposure of sensitive information vulnerability exists in Jenkins meliora-testlab Plugin 1.14 and earlier in TestlabNotifier.java that allows attackers with file system access to the Jenkins master to obtain the API key stored in this plugin’s configuration.

CPENameOperatorVersion
meliora_testlable1.14

CPE	Name	Operator	Version
	meliora_testlab	le	1.14

References

jenkins.io/security/advisory/2018-07-30/