CVE-2018-1000187

A exposure of sensitive information vulnerability exists in Jenkins Kubernetes Plugin 1.7.0 and older in ContainerExecDecorator.java that results in sensitive variables such as passwords being written to logs.

Score

CVSS 3.0 6.5 Medium

Status

Modified - cve@mitre.org

Published

2018-06-05

Last modified

2024-09-17

Weaknesses

CWE-200

Affected products

• Kubernetes (Jenkins)

References

• https://jenkins.io/security/advisory/2018-06-04/#SECURITY-883