CVE-2019-1003018 in GitHub Authentication Plugin
Sumário
de MITRE
An exposure of sensitive information vulnerability exists in Jenkins GitHub Authentication Plugin 0.29 and earlier in GithubSecurityRealm/config.jelly that allows attackers able to view a Jenkins administrator's web browser output, or control the browser (e.g. malicious extension) to retrieve the configured client secret.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.