CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 4.3. It affects Jenkins, Java.
CVE
CVE-2018-1999006
Severity
MEDIUM
CVSS
4.3
EPSS
0.95%
Jenkins Java
Original NVD Description
A exposure of sensitive information vulnerability exists in Jenkins 2.132 and earlier, 2.121.1 and earlier in Plugin.java that allows attackers to determine the date and time when a plugin HPI/JPI file was last extracted, which typically is the date of the most recent installation/upgrade.
Related CVEs
Other vulnerabilities affecting the same vendor(s)