CVE-2018-1999028

Name of the Vulnerable Software and Affected Versions Jenkins Accurev Plugin versions 0.7.16 and earlier

Description A sensitive information exposure issue exists, allowing attackers to capture credentials with a known credentials ID stored in Jenkins. This occurs due to a vulnerability in the AccurevSCM.java file.

Recommendations For Jenkins Accurev Plugin versions 0.7.16 and earlier, consider updating to a version later than 0.7.16 to resolve the issue. As a temporary workaround, restrict access to the AccurevSCM.java file to minimize the risk of exploitation.