~ / search / GHSA-23xr-9xxr-vg3c

GHSA-23xr-9xxr-vg3c

Improper authorization vulnerability in Jenkins Mesos Plugin

Source: GitHub Advisory Database (reviewed) Moderate CVE-2018-1000420

Packages

EcosystemPackageAffectedFixed in
Maven org.jenkins-ci.plugins:mesos < 0.18 0.18

Details

As written in the advisory (Markdown source, shown as plain text).

An improper authorization vulnerability exists in Jenkins Mesos Plugin 0.17.1 and earlier in MesosCloud.java that allows attackers with Overall/Read access to obtain credentials IDs for credentials stored in Jenkins.

References

External links from the advisory. They lead to third-party sites.