Miggo Logo
Miggo Vulnerability Database
→
CVE-2018-1000169

CVE-2018-1000169:
Exposure of Sensitive Information to an Unauthorized Actor in Jenkins

5.3

CVSS Score
3.0

Basic Information

CVE ID
CVE-2018-1000169
GHSA ID
GHSA-cpw3-x7gf-p872
EPSS Score
0.39391%
CWE
CWE-200
Published
5/14/2022
Updated
1/27/2023
KEV Status
No
Technology
TechnologyJava

Technical Details

CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Package NameEcosystemVulnerable VersionsFirst Patched Version
org.jenkins-ci.main:jenkins-coremaven<= 2.107.12.107.2
org.jenkins-ci.main:jenkins-coremaven>= 2.108, <= 2.1152.116

Vulnerability Intelligence
Miggo AIMiggo AI

Miggo AIRoot Cause Analysis:
In progress

WAF Protection Rules

WAF Rule

*n *xposur* o* s*nsitiv* in*orm*tion vuln*r**ility *xists in J*nkins *.*** *n* ol**r, LTS *.***.* *n* ol**r, in *LI*omm*n*.j*v* *n* Vi*wOption**n*l*r.j*v* t**t *llows un*ut*oriz** *tt**k*rs to *on*irm t** *xist*n** o* ***nts or vi*ws wit* *n *tt**k*r

Reasoning

No *n*lysis *v*il**l*