Lucene search

MitreCVE-2018-1999030

HistoryAug 01, 2018 - 1:29 p.m.

CVE-2018-1999030

2018-08-0113:29:00

CWE-200

mitre

web.nvd.nist.gov

cve-2018-1999030

jenkins

maven

artifact

choicelistprovider

nexus

plugin

vulnerability

artifactory

nexus3

credentials

security

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

AI Score

5.2

Confidence

High

EPSS

0.001

Percentile

22.0%

JSON

An exposure of sensitive information vulnerability exists in Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin 1.3.1 and earlier in ArtifactoryChoiceListProvider.java, NexusChoiceListProvider.java, Nexus3ChoiceListProvider.java that allows attackers to capture credentials with a known credentials ID stored in Jenkins.

Affected configurations

Nvd

Node

jenkinsmaven_artifact_choicelistprovider_\(nexus\)Range≤1.3.1jenkins

VendorProductVersionCPE
jenkinsmaven_artifact_choicelistprovider_\(nexus\)*cpe:2.3:a:jenkins:maven_artifact_choicelistprovider_\(nexus\):*:*:*:*:*:jenkins:*:*

Vendor	Product	Version	CPE
jenkins	maven_artifact_choicelistprovider_\(nexus\)	*	cpe:2.3:a:jenkins:maven_artifact_choicelistprovider_\(nexus\)::::::jenkins::*

References

jenkins.io/security/advisory/2018-07-30/#SECURITY-1022

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

AI Score

5.2

Confidence

High

EPSS

0.001

Percentile

22.0%

JSON

Related for CVE-2018-1999030