CVE-2018-1999040

An exposure of sensitive information vulnerability exists in Jenkins Kubernetes Plugin 1.10.1 and earlier in KubernetesCloud.java that allows attackers to capture credentials with a known credentials ID stored in Jenkins...

CVE-2018-1999040

An exposure of sensitive information vulnerability exists in Jenkins Kubernetes Plugin 1.10.1 and earlier in KubernetesCloud.java that allows attackers to capture credentials with a known credentials ID stored in Jenkins...

CVE-2018-1999040

CVE-2018-1999040 affects the Jenkins Kubernetes Plugin (≤1.10.1). The issue resides in KubernetesCloud.java and stems from a lack of privilege checks, enabling an attacker who knows a Jenkins credential ID to disclose stored credentials. CVSS v3 base score 8.8 (HIGH) with network attack vector, l...