CVE-2018-1000150

An exposure of sensitive information vulnerability exists in Jenkins Reverse Proxy Auth Plugin 1.5 and older in ReverseProxySecurityRealmauthContext that allows attackers with local file system access to obtain a list of authorities for logged in users...

CVE-2018-1000150: Exposure of Sensitive Information to an Unauthorized Actor

An exposure of sensitive information vulnerability exists in Jenkins Reverse Proxy Auth Plugin 1.5 and older in ReverseProxySecurityRealmauthContext that allows attackers with local file system access to obtain a list of authorities for logged in users...

PT-2018-9322

Name of the Vulnerable Software and Affected Versions Jenkins Reverse Proxy Auth Plugin versions 1.5 and older Description An exposure of sensitive information issue exists in the ReverseProxySecurityRealmauthContext that allows attackers with local file system access to obtain a list of...