Junglewise Threat Intelligence

CVE-2018-1000190: Exposure of sensitive information vulnerability in Jenkins Black Duck Hub Plugin

CVE-2018-1000190 · Severity: low · CVSS 3 · Published 2022-05-14

Technologies: com.blackducksoftware.integration:blackduck-hub (Maven). Vendors: Maven.

Executive brief

Exposure of sensitive information vulnerability in Jenkins Black Duck Hub Plugin

Affected products

Maven com.blackducksoftware.integration:blackduck-hub

Related threats

XML External Entity processing vulnerability in Jenkins Black Duck Hub Plugin
Jenkins Black Duck Hub Plugin allowed any user with Overall/Read to read and write its configuration