2 matches found
CVE-2018-1000410
An information exposure vulnerability exists in Jenkins 2.145 and earlier, LTS 2.138.1 and earlier, and the Stapler framework used by these releases, in core/src/main/java/org/kohsuke/stapler/RequestImpl.java, core/src/main/java/hudson/model/Descriptor.java that allows attackers with...
8.5CVSS0.00433EPSS
SaveExploits0References5
PT-2019-8721
Name of the Vulnerable Software and Affected Versions Jenkins versions 2.145 and earlier Jenkins LTS versions 2.138.1 and earlier Description An information exposure issue exists that allows attackers with Overall/Administer permission or access to the local file system to obtain credentials...
7.8CVSS0.00433EPSS
SaveExploits0References8
20