~ / search / GHSA-w86j-99wg-r29f

GHSA-w86j-99wg-r29f

Jenkins TraceTronic ECU-TEST Plugin Man in the middle vulnerability

Source: GitHub Advisory Database (reviewed) High CVE-2018-1999025

Packages

EcosystemPackageAffectedFixed in
Maven de.tracetronic.jenkins.plugins:ecutest < 2.4 2.4

Details

As written in the advisory (Markdown source, shown as plain text).

A man in the middle vulnerability exists in Jenkins TraceTronic ECU-TEST Plugin 2.3 and earlier in ATXPublisher.java, ATXValidator.java that allows attackers to impersonate any service that Jenkins connects to.

References

External links from the advisory. They lead to third-party sites.