CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.5. It affects Jenkins, Java.
CVE
CVE-2018-1999041
Severity
MEDIUM
CVSS
5.5
EPSS
0.38%
Jenkins Java
Original NVD Description
An exposure of sensitive information vulnerability exists in Jenkins Tinfoil Security Plugin 1.6.1 and earlier in TinfoilScanRecorder.java that allows attackers with file system access to the Jenkins master to obtain the API secret key stored in this plugin's configuration.
Related CVEs
Other vulnerabilities affecting the same vendor(s)