CVE-2018-1000109

2018-03-1313:00:00

mitre

www.cve.org

jenkins

google play

android publisher plugin

vulnerability

improper authorization

credential ids

AI Score

4.4

Confidence

High

EPSS

0.001

Percentile

22.0%

JSON

An improper authorization vulnerability exists in Jenkins Google Play Android Publisher Plugin version 1.6 and earlier in GooglePlayBuildStepDescriptor.java that allow an attacker to obtain credential IDs.

References

jenkins.io/security/advisory/2018-02-26/#SECURITY-715