Lucene search
Redhat.comRH:CVE-2018-1000600HistoryJun 28, 2018 - 9:49 a.m.
CVE-2018-1000600
2018-06-2809:49:32
redhat.com
access.redhat.com
17
0.943 High
EPSS
Percentile
99.2%
A exposure of sensitive information vulnerability exists in Jenkins GitHub Plugin 1.29.1 and earlier in GitHubTokenCredentialsCreator.java that allows attackers to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
Related
prion
prion
Design/Logic Flaw
2018-06-26 17:29:00
nvd
nvd
CVE-2018-1000600
2018-06-26 17:29:00
nuclei
nuclei
Jenkins GitHub Plugin <=1.29.1 - Server-Side Request Forgery
2021-07-26 17:18:45
cve
cve
CVE-2018-1000600
2022-10-03 16:21:59
cvelist
cvelist
CVE-2018-1000600
2022-10-03 16:21:59
github
github
osv
osv
CSRF vulnerability and missing permission checks in GitHub Plugin allowed capturing credentials
2022-05-13 01:48:38
CVE-2018-1000600
2018-06-26 17:29:00