Executive brief
Jenkins Configuration as Code Plugin vulnerable to Exposure of Sensitive Information
Affected products
- Maven io.jenkins:configuration-as-code
Junglewise Threat Intelligence
CVE-2018-1000609: Jenkins Configuration as Code Plugin vulnerable to Exposure of Sensitive Information
CVE-2018-1000609 · Severity: low · CVSS 3 · Published 2022-05-14
Technologies: io.jenkins:configuration-as-code (Maven). Vendors: Maven.
Related threats
- Insertion of Sensitive Information into Log File in Jenkins Configuration as Code Plugin
- Cleartext Transmission of Sensitive Information in Jenkins Configuration as Code Plugin
- Improper Encoding or Escaping of Output in Jenkins Configuration as Code Plugin
- Missing Authorization in Jenkins Configuration as Code Plugin
- Insertion of Sensitive Information into Log File in Jenkins Configuration as Code Plugin