io.fabric8.jenkins.plugins:openshift-sync (>=0.1.18, <=1.0.42) potentially affected by CVE-2018-1999040 via org.csanchez.jenkins.plugins:kubernetes (0.10)

org.csanchez.jenkins.plugins:kubernetes MAVEN version 0.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.csanchez.jenkins.plugins:kubernetes and may be impacted: - io.fabric8.jenkins.plugins:openshift-sync =0.1.18, =1.0.42 Source cves:...

CVE-2018-1999040

An exposure of sensitive information vulnerability exists in Jenkins Kubernetes Plugin 1.10.1 and earlier in KubernetesCloud.java that allows attackers to capture credentials with a known credentials ID stored in Jenkins...

CVE-2018-1999040

CVE-2018-1999040 affects the Jenkins Kubernetes Plugin (≤1.10.1). The issue resides in KubernetesCloud.java and stems from a lack of privilege checks, enabling an attacker who knows a Jenkins credential ID to disclose stored credentials. CVSS v3 base score 8.8 (HIGH) with network attack vector, l...

CVE-2018-1999040

An exposure of sensitive information vulnerability exists in Jenkins Kubernetes Plugin 1.10.1 and earlier in KubernetesCloud.java that allows attackers to capture credentials with a known credentials ID stored in Jenkins...