Jenkins

Maven Artifact Choicelistprovider (nexus)

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.5

CVE-2023-40347

  • EPSS 0.11%
  • Published 16.08.2023 15:15:12
  • Last modified 21.11.2024 08:19:16

Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin 1.14 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to.

5.4

CVE-2018-1999030

  • EPSS 0.04%
  • Published 01.08.2018 13:29:00
  • Last modified 21.11.2024 03:57:05

An exposure of sensitive information vulnerability exists in Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin 1.3.1 and earlier in ArtifactoryChoiceListProvider.java, NexusChoiceListProvider.java, Nexus3ChoiceListProvider.java that allows att...