CVE-2018-1000605

Published: Jun 26, 2018Modified: Nov 21, 2024

7.4

Vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Exploitability: 2.2 / Impact: 5.2

Source: NVD

Description

A man in the middle vulnerability exists in Jenkins CollabNet Plugin 2.0.4 and earlier in CollabNetApp.java, CollabNetPlugin.java, CNFormFieldValidator.java that allows attackers to impersonate any service that Jenkins connects to.

Affected (1)

Products: Jenkins: Collabnet

Jenkins

1 product

Collabnet

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Jenkins Collabnet	Up to 2.0.4

Related CWEs

CWE-295

Improper Certificate Validation

The product does not validate, or incorrectly validates, a certificate.

References (2)

https://jenkins.io/security/advisory/2018-06-25/#SECURITY-941

Source: cve@mitre.org

Vendor Advisory

https://jenkins.io/security/advisory/2018-06-25/#SECURITY-941

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.