PT-2018-9283
CVE-2018-1000104
·
تاريخ النشر
2018-03-13
·
تاريخ التحديث
2022-05-13
الوصف من
CVSS 3.1
2.7
منخفضةالمقاييسAV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions:
Jenkins Coverity Plugin versions 1.10.0 and earlier
Description:
A plaintext storage of a password issue exists in CIMInstance.java, allowing an attacker with local file system access or control of a Jenkins administrator's web browser to retrieve the configured keystore and private key passwords.
Recommendations:
For Jenkins Coverity Plugin versions 1.10.0 and earlier, update to version 1.11.0, which integrates with Credentials Plugin to securely store passwords and automatically migrates existing passwords.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾