5.3

CVSS Score

3.0

Basic Information

CVE ID

CVE-2018-1000169

GHSA ID

GHSA-cpw3-x7gf-p872

EPSS Score

0.39391%

CWE

CWE-200

Published

5/14/2022

Updated

1/27/2023

KEV Status

Technology

Java

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2018-1000169

CVE-2018-1000169: Exposure of Sensitive Information to an Unauthorized Actor in Jenkins

An exposure of sensitive information vulnerability exists in Jenkins 2.115 and older, LTS 2.107.1 and older, in CLICommand.java and ViewOptionHandler.java that allows unauthorized attackers to confirm the existence of agents or views with an attacker-specified name by sending a CLI command to Jenkins.

(GitHub Advisory)

5.3

CVSS Score

3.0

Basic Information

CVE ID

CVE-2018-1000169

GHSA ID

GHSA-cpw3-x7gf-p872

EPSS Score

0.39391%

CWE

CWE-200

Published

5/14/2022

Updated

1/27/2023

KEV Status

Technology

Java

Technical Details

CVSS Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
org.jenkins-ci.main:jenkins-core	maven	<= 2.107.1	2.107.2
org.jenkins-ci.main:jenkins-core	maven	>= 2.108, <= 2.115	2.116

Vulnerability Intelligence
Miggo AI

Root Cause Analysis:

In progress

WAF Protection Rules

WAF Rule

*n *xposur* o* s*nsitiv* in*orm*tion vuln*r**ility *xists in J*nkins *.*** *n* ol**r, LTS *.***.* *n* ol**r, in *LI*omm*n*.j*v* *n* Vi*wOption**n*l*r.j*v* t**t *llows un*ut*oriz** *tt**k*rs to *on*irm t** *xist*n** o* ***nts or vi*ws wit* *n *tt**k*r

Reasoning

No *n*lysis *v*il**l*

5.3

Basic Information

Concerned about an active attack path?

CVE-2018-1000169: Exposure of Sensitive Information to an Unauthorized Actor in Jenkins

5.3

Basic Information

Technical Details

Vulnerability IntelligenceMiggo AI

WAF Protection Rules

WAF Rule

Reasoning

Vulnerability Intelligence
Miggo AI