CVE-2018-1000402 in AWS CodeDeploy Plugin信息

摘要

由 MITRE

Jenkins project Jenkins AWS CodeDeploy Plugin version 1.19 and earlier contains a File and Directory Information Exposure vulnerability in AWSCodeDeployPublisher.java that can result in Disclosure of environment variables. This vulnerability appears to have been fixed in 1.20 and later.

Be aware that VulDB is the high quality source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

预定

2018-06-21

披露

2018-07-09

管理

已接受

条目

VDB-120913

CPE

准备好

CWE

CWE-200 (已确认)

CVSS

4.3 (NVD)

EPSS

0.00967

KEV

否

活动

非常低

部门

Telecommunication

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2018-1000402
NVD	https://nvd.nist.gov/vuln/detail/CVE-2018-1000402
CVE Details	https://www.cvedetails.com/cve/CVE-2018-1000402/

◂ 上一步一览下一步 ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!