CVE-2018-1000401 | BDVDB-2026-104064 Detail

Description#

Jenkins project Jenkins AWS CodePipeline Plugin version 0.36 and earlier contains a Insufficiently Protected Credentials vulnerability in AWSCodePipelineSCM.java that can result in Credentials Disclosure. This attack appear to be exploitable via local file access. This vulnerability appears to have been fixed in 0.37 and later.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://jenkins.io/security/advisory/2018-06-25/#SECURITY-967

Exploit#

No public exploit known

History#

Version 12018-07-09Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.