← Back

Sonarqube Scanner

sonarqube_scanner

Vendor: Sonarsource • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-1000425
1Sonarsource
1Sonarqube Scanner
Nov 21, 2024
Jan 9, 2019
N/A· v4
7.8 HIGH· v3
2.1 LOW· v2
An insufficiently protected credentials vulnerability exists in Jenkins SonarQube Scanner Plugin 2.8 and earlier in SonarInstallation.java that allows attackers with local file system access to obtain the credentials use...Show more
An insufficiently protected credentials vulnerability exists in Jenkins SonarQube Scanner Plugin 2.8 and earlier in SonarInstallation.java that allows attackers with local file system access to obtain the credentials used to connect to SonarQube.Show less