PT-2018-9319 · Jenkins · Jenkins Perforce Plugin

Oleg Nenashev · Published 2018-04-05 · Updated 2022-05-14 · CVE-2018-1000147

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Jenkins Perforce Plugin versions prior to 1.3.37

Description A sensitive information exposure issue exists, allowing attackers with insufficient permissions to obtain Perforce passwords configured in jobs.

Recommendations For Jenkins Perforce Plugin versions prior to 1.3.37, update to version 1.3.37 or later to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2018-1000147

GHSA-JRHW-R343-PJWJ

Affected Products

Jenkins Perforce Plugin

References · 4

• https://jenkins.io/security/advisory/2018-03-26/#SECURITY-536 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-1000147 · Security Note
• https://osv.dev/vulnerability/GHSA-jrhw-r343-pjwj · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-1000147 · Vendor Advisory