CVE-2018-1000600

CVSS 3.0: 8.8 high
EPSS: 91%p100
Published: Jun 26, 2018 · Jun 26, 2018
Modified: Jun 17, 2026

Analyze CVE-2018-1000600 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

A exposure of sensitive information vulnerability exists in Jenkins GitHub Plugin 1.29.1 and earlier in GitHubTokenCredentialsCreator.java that allows attackers to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.

Vendors: jenkins

Products: github

Weakness: CWE-200

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (90.9%)

In the news

1 story

Attackers Are Taking Advantage of the Open-Source Service Interactsh for Malicious Purposes

Palo Alto Unit 42Jun 6, 01:14 UTC · Jun 6, 2024Exploit / PoCCVE-2017-9506 CVE-2017-12629 CVE-2019-2767+233