CVE-2018-1000600
HIGH 8.8EPSS 90.9%
A exposure of sensitive information vulnerability exists in Jenkins GitHub Plugin 1.29.1 and earlier in GitHubTokenCredentialsCreator.java that allows attackers to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
- CVSS v3.0
- 8.8 HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS v3.0
- 8.8 HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS v2.0
- 4.3 MEDIUM
AV:N/AC:M/Au:N/C:P/I:N/A:N - EPSS
- 90.89% chance of exploitation in the next 30 days, 100th percentile
- Nuclei
- high · CWE-200
- Published
- 2018-06-26
- Updated
- 2024-09-16
Nuclei templates (1)
Exploit collections (2)
- chaitin/xray/blob/master/pocs/jenkins-cve-2018-1000600.yml
- zan8in/afrog/blob/main/pocs/afrog-pocs/CVE/2018/CVE-2018-1000600.yaml