8.8
CVSSv3

CVE-2018-1999028

Published: 01/08/2018 Updated: 03/10/2019
CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8
CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8
VMScore: 356
Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N

Vulnerability Summary

An exposure of sensitive information vulnerability exists in Jenkins Accurev Plugin 0.7.16 and previous versions in AccurevSCM.java that allows malicious users to capture credentials with a known credentials ID stored in Jenkins.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

jenkins accurev