-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability is related to the exposure of sensitive information due to storing passwords in plain text in the Anchore Container Image Scanner Jenkins Plugin. The fix involves encrypting the password in the configuration files. The AnchoreBuilder class is directly mentioned in the vulnerability description as the location of the vulnerability.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.jenkins-ci.plugins:anchore-container-scanner | maven | < 1.0.17 | 1.0.17 |
JavaJavaKEV Misses 88% of Exploited CVEs- Get the report