CVE-2018-1000424

An insufficiently protected credentials vulnerability exists in Jenkins Artifactory Plugin 2.16.1 and earlier in ArtifactoryBuilder.java, CredentialsConfig.java that allows attackers with local file system access to obtain old credentials configured for the plugin before it integrated with...

CVE-2018-1000424

The CVE affects Jenkins Artifactory Plugin up to version 2.16.1, where ArtifactoryBuilder.java and CredentialsConfig.java stored old credentials in an insufficiently protected form before integration with the Credentials Plugin. The vulnerability allows attackers with local filesystem access to o...