CVE-2018-1999033

Published: Aug 1, 2018Modified: Nov 21, 2024

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

An exposure of sensitive information vulnerability exists in Jenkins Anchore Container Image Scanner Plugin 10.16 and earlier in AnchoreBuilder.java that allows attackers with Item/ExtendedRead permission or file system access to the Jenkins master to obtain the password stored in this plugin's configuration.

Affected (1)

Products: Anchore: Container Image Scanner

1 product

Container Image Scanner

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Anchore Container Image Scanner	Up to 1.0.16

Related CWEs

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

https://jenkins.io/security/advisory/2018-07-30/#SECURITY-1039

Source: cve@mitre.org

Third Party Advisory

https://jenkins.io/security/advisory/2018-07-30/#SECURITY-1039

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.