Back to search
CVE-2018-1999033
Published: Aug 1, 2018
Modified: Sep 17, 2024
PUBLISHED
Description
An exposure of sensitive information vulnerability exists in Jenkins Anchore Container Image Scanner Plugin 10.16 and earlier in AnchoreBuilder.java that allows attackers with Item/ExtendedRead permission or file system access to the Jenkins master to obtain the password stored in this plugin's configuration.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
https://jenkins.io/security/advisory/2018-07-30/#SECURITY-1039
x_refsource_CONFIRM
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now