CVE-2018-1000109

Published: Mar 13, 2018Modified: Nov 21, 2024

4.3

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Exploitability: 2.8 / Impact: 1.4

Source: NVD

Description

An improper authorization vulnerability exists in Jenkins Google Play Android Publisher Plugin version 1.6 and earlier in GooglePlayBuildStepDescriptor.java that allow an attacker to obtain credential IDs.

Affected (1)

Products: Jenkins: Google Play Android Publisher

Jenkins

1 product

Google Play Android Publisher

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Jenkins Google Play Android Publisher	Up to 1.6

Related CWEs

CWE-863

Incorrect Authorization

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.

References (2)

https://jenkins.io/security/advisory/2018-02-26/#SECURITY-715

Source: cve@mitre.org

Vendor Advisory

https://jenkins.io/security/advisory/2018-02-26/#SECURITY-715

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.