CVE-2018-1999041

An exposure of sensitive information vulnerability exists in Jenkins Tinfoil Security Plugin 1.6.1 and earlier in TinfoilScanRecorder.java that allows…

published August 1, 2018

CVSS
—
EPSS
0%
Percentile
30.9
In the wild
Unconfirmed
What it is

An exposure of sensitive information vulnerability exists in Jenkins Tinfoil Security Plugin 1.6.1 and earlier in TinfoilScanRecorder.java that allows attackers with file system access to the Jenkins master to obtain the API secret key stored in this plugin's configuration.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00381 · 30.9th percentile
Published
2018-08-01T13:00Z
EPSS history
Timeline
  • 01 AUG 13:00Z
    An exposure of sensitive information vulnerability exists in Jenkins Tinfoil Security Plugin 1.6.1 and earlier in TinfoilScanRecorder.java that allows…
    cvelistv5