CVE-2019-1003018

An exposure of sensitive information vulnerability exists in Jenkins GitHub Authentication Plugin 0.29 and earlier in GithubSecurityRealm/config.jelly that…

published February 6, 2019

CVSS
—
EPSS
1%
Percentile
66.2
In the wild
Unconfirmed
What it is

An exposure of sensitive information vulnerability exists in Jenkins GitHub Authentication Plugin 0.29 and earlier in GithubSecurityRealm/config.jelly that allows attackers able to view a Jenkins administrator's web browser output, or control the browser (e.g. malicious extension) to retrieve the configured client secret.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01131 · 66.2th percentile
Published
2019-02-06T16:00Z
EPSS history
Timeline
  • 06 FEB 16:00Z
    An exposure of sensitive information vulnerability exists in Jenkins GitHub Authentication Plugin 0.29 and earlier in GithubSecurityRealm/config.jelly that…
    cvelistv5