Junglewise Threat Intelligence

CVE-2018-1000104: Jenkins Coverity Plugin has Insufficiently Protected Credentials

CVE-2018-1000104 · Severity: low · CVSS 3 · Published 2022-05-13

Technologies: org.jenkins-ci.plugins:coverity (Maven). Vendors: Maven.

Executive brief

Jenkins Coverity Plugin has Insufficiently Protected Credentials

Affected products

Maven org.jenkins-ci.plugins:coverity

Related threats

Missing permission check in Coverity Plugin allows capturing credentials
Jenkins Coverity Plugin vulnerable to cross-site request forgery (CSRF)
Jenkins Coverity Plugin allows attackers with Overall/Read permission to enumerate credentials IDs