CVE-2018-1000143

Published: Apr 5, 2018Modified: Nov 21, 2024

6.7

Vector

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.8 / Impact: 5.9

Source: NVD

Description

An exposure of sensitive information vulnerability exists in Jenkins GitHub Pull Request Builder Plugin version 1.39.0 and older in GhprbCause.java that allows an attacker with local file system access to obtain GitHub credentials.

Affected (1)

Products: Jenkins: Github Pull Request Builder

Jenkins

1 product

Github Pull Request Builder

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Jenkins Github Pull Request Builder	Up to 1.39.0

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

https://jenkins.io/security/advisory/2018-03-26/#SECURITY-262

Source: cve@mitre.org

Vendor Advisory

https://jenkins.io/security/advisory/2018-03-26/#SECURITY-262

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.