CVE-2018-1999006

A exposure of sensitive information vulnerability exists in Jenkins 2.132 and earlier, 2.121.1 and earlier in Plugin.java that allows attackers to determine the date and time when a plugin HPI/JPI file was last extracted, which typically is the date of the most recent installation/upgrade...

PT-2018-15191

Name of the Vulnerable Software and Affected Versions Jenkins versions prior to 2.132 Jenkins versions prior to 2.121.1 Description A sensitive information exposure issue exists, allowing attackers to determine the date and time when a plugin HPI/JPI file was last extracted, typically the date of...