Jenkins Credentials Binding plugin is under attack to an info: disclosure vulnerability.
Illigal use of this issue to gain control over sensitive informations that may leed to further attacks.
Jenkins Credentials Binding plugin version 1.17 is vulnerable.
| Bugtraq ID : | 109320 |
| Class : | Design Error |
| CVE: | CVE-2019-1010241 |
| Remote : | Yes |
| Local : | No |
| Published : | May 01 2019 12:00AM |
| Updated : | July 26 2019 06:00AM |
| Credit : | Marcelo Sacchetin and Aditya Balapure |
| Vulnerable : | Redhat OpenShift Container Platform 4.1 Redhat OpenShift Container Platform 3.9 Redhat OpenShift Container Platform 3.11 Redhat OpenShift Container Platform 3.10 Jenkins Credentials Binding 1.17 |
