Security Advisory
CVE-2018-1000610
8.8
HIGH
Vulnerability Description
A exposure of sensitive information vulnerability exists in Jenkins Configuration as Code Plugin 0.7-alpha and earlier in DataBoundConfigurator.java, Attribute.java, BaseConfigurator.java, ExtensionConfigurator.java that allows attackers with access to Jenkins log files to obtain the passwords configured using Configuration as Code Plugin.
Published Date
June 26, 2018
Official Source
NIST NVD Advisory