SUSE CVE-2018-1000147

An exposure of sensitive information vulnerability exists in Jenkins Perforce Plugin version 1.3.36 and older in PerforcePasswordEncryptor.java that allows attackers with insufficient permission to obtain Perforce passwords configured in jobs to obtain them...

org.hudsonci.plugins:reviewboard (=1.0.2-h-1) potentially affected by CVE-2018-1000147 via org.jvnet.hudson.plugins:perforce (=1.1.14)

org.jvnet.hudson.plugins:perforce MAVEN version =1.1.14 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.plugins:perforce and may be impacted: - org.hudsonci.plugins:reviewboard =1.0.2-h-1 Source cves: CVE-2018-1000147 Source advisory:...

CVE-2018-1000147

Jenkins Perforce Plugin vulnerability CVE-2018-1000147 affects versions 1.3.36 and earlier, where PerforcePasswordEncryptor.java leaks Perforce passwords configured in jobs to attackers with insufficient permissions. Exploitation details, affected versions, and impact are described in multiple so...