CVE-2018-1999006
23.07.2018, 19:29
A exposure of sensitive information vulnerability exists in Jenkins 2.132 and earlier, 2.121.1 and earlier in Plugin.java that allows attackers to determine the date and time when a plugin HPI/JPI file was last extracted, which typically is the date of the most recent installation/upgrade.Enginsight
| Vendor | Product | Version |
|---|---|---|
| jenkins | jenkins | 𝑥 ≤ 2.121.1 |
| jenkins | jenkins | 𝑥 ≤ 2.132 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration