Lucene search
PRIOn knowledge basePRION:CVE-2018-1000404HistoryJul 09, 2018 - 1:29 p.m.
Design/Logic Flaw
2018-07-0913:29:00
PRIOn knowledge base
www.prio-n.com
1
Jenkins project Jenkins AWS CodeBuild Plugin version 0.26 and earlier contains a Insufficiently Protected Credentials vulnerability in AWSClientFactory.java, CodeBuilder.java that can result in Credentials Disclosure. This attack appear to be exploitable via local file access. This vulnerability appears to have been fixed in 0.27 and later.
| CPE | Name | Operator | Version |
|---|---|---|---|
| aws_codebuild | le | 0.26 |
References
Related
cve
cve
CVE-2018-1000404
2018-07-09 13:29:00
nvd
nvd
CVE-2018-1000404
2018-07-09 13:29:00
osv
osv
Insufficiently Protected Credentials in Jenkins AWS CodeBuild Plugin
2022-05-13 01:48:36
CVE-2018-1000404
2018-07-09 13:29:00
cvelist
cvelist
CVE-2018-1000404
2018-07-09 13:00:00
github
github
Insufficiently Protected Credentials in Jenkins AWS CodeBuild Plugin
2022-05-13 01:48:36
gitlab
gitlab
Insufficiently Protected Credentials
2018-07-09 00:00:00