CVE-2018-1999030

Name of the Vulnerable Software and Affected Versions Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin versions 1.3.1 and earlier

Description A sensitive information exposure issue exists, allowing attackers to capture credentials with a known credentials ID stored in Jenkins. This issue is related to the ArtifactoryChoiceListProvider.java, NexusChoiceListProvider.java, and Nexus3ChoiceListProvider.java files.

Recommendations For Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin versions 1.3.1 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.