CVE-2018-1999031

MEDIUM

Jenkins meliora-testlab Plugin <1.14 - Info Disclosure

Title source: llm
STIX 2.1

Description

An exposure of sensitive information vulnerability exists in Jenkins meliora-testlab Plugin 1.14 and earlier in TestlabNotifier.java that allows attackers with file system access to the Jenkins master to obtain the API key stored in this plugin's configuration.

References (1)

Core 1
Core References

Scores

CVSS v3 6.5
EPSS 0.0007
EPSS Percentile 21.0%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-200
Status published
Products (2)
jenkins/meliora_testlab < 1.14
org.jenkins-ci.plugins/meliora-testlab 0 - 1.15Maven
Published Aug 01, 2018
Tracked Since Feb 18, 2026