PT-2018-9317 · Jenkins · Jenkins Perforce Plugin+1
CVSS v3.1
6.5
Média
| Vetor | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Jenkins Perforce Plugin versions prior to 1.3.37
Description
A sensitive information exposure issue exists, allowing attackers with local file system access to obtain and decrypt encrypted Perforce passwords. This is due to a vulnerability in the PerforcePasswordEncryptor.java file.
Recommendations
For Jenkins Perforce Plugin versions prior to 1.3.37, update to version 1.3.37 or later to resolve the issue.
Correção
Information Disclosure
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Jenkins
Jenkins Perforce Plugin