CVE-2018-1000420

CVE-2018-1000420 affects the Jenkins Mesos Plugin up to and including version 0.17.1, where MesosCloud.java contains an improper authorization flaw. The issue allows attackers with Overall/Read access to retrieve credentials IDs for credentials stored in Jenkins, exposing sensitive credential ref...