VulnCheck KEV: CVE-2018-1000600

A exposure of sensitive information vulnerability exists in Jenkins GitHub Plugin 1.29.1 and earlier in GitHubTokenCredentialsCreator.java that allows attackers to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in...

CVE-2018-1000600

creationtimestamp| type| source ---|---|--- 2021-09-21 06:42:55+00:00| published-proof-of-concept| https://t.me/pwnwikizhchannel/9...

CVE-2018-1000600

The Jenkins GitHub Plugin (version 1.29.1 and earlier) is vulnerable to a Server-Side Request Forgery (SSRF) and exposure of sensitive information in the GitHubTokenCredentialsCreator.java file. The root cause is a failure to properly detect access rights, allowing an attacker to use attacker-spe...