ZeroHour

CVE-2018-1000109

CVSS 3.0
4.3 medium
EPSS
<1%p50
Published
()
Modified
Description

An improper authorization vulnerability exists in Jenkins Google Play Android Publisher Plugin version 1.6 and earlier in GooglePlayBuildStepDescriptor.java that allow an attacker to obtain credential IDs.

Vendors
jenkins
Products
google-play-android-publisher
Weakness
CWE-863
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

In the news

No ingested article mentions this CVE yet.