Configuration As Code@0.7 Security Vulnerabilities and Issues — Configuration As Code@0.7 CVE List

Lucene search

JenkinsConfiguration As Code0.7

2 matches found

CVE•added 2018/06/26 5:29 p.m.•63 views

CVE-2018-1000610

A exposure of sensitive information vulnerability exists in Jenkins Configuration as Code Plugin 0.7-alpha and earlier in DataBoundConfigurator.java, Attribute.java, BaseConfigurator.java, ExtensionConfigurator.java that allows attackers with access to Jenkins log files to obtain the passwords conf...

8.8CVSS8.4AI score0.00054EPSS

CVE•added 2018/06/26 5:29 p.m.•50 views

CVE-2018-1000609

A exposure of sensitive information vulnerability exists in Jenkins Configuration as Code Plugin 0.7-alpha and earlier in ConfigurationAsCode.java that allows attackers with Overall/Read access to obtain the YAML export of the Jenkins configuration.

6.5CVSS6.2AI score0.00072EPSS