PT-2019-8730
CVE-2018-1000419
·
تاريخ النشر
2019-01-09
·
تاريخ التحديث
2022-05-13
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Jenkins HipChat Plugin versions 2.2.0 and earlier
Description
An improper authorization issue exists in the Jenkins HipChat Plugin, specifically in HipChatNotifier.java, allowing attackers with Overall/Read access to obtain credentials IDs for credentials stored in Jenkins. This issue is resolved in version 2.2.1, which requires Overall/Administer permission for an enumeration of credentials IDs.
Recommendations
For Jenkins HipChat Plugin versions 2.2.0 and earlier, update to version 2.2.1 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾