Security Advisory

CVE-2018-1000610

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2018-06-26 17:00:00

Last updated 2024-09-17 02:11:28

Assigner mitre

State PUBLISHED

Description

A exposure of sensitive information vulnerability exists in Jenkins Configuration as Code Plugin 0.7-alpha and earlier in DataBoundConfigurator.java, Attribute.java, BaseConfigurator.java, ExtensionConfigurator.java that allows attackers with access to Jenkins log files to obtain the passwords configured using Configuration as Code Plugin.

← Browse all CVEs View on cve.org ↗