CVE-2018-1000418

An improper authorization vulnerability exists in Jenkins HipChat Plugin 2.2.0 and earlier in HipChatNotifier.java that allows attackers with Overall/Read access to send test notifications to an attacker-specified HipChat server with attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
References
Configurations

Configuration 1

cpe:2.3:a:atlassian:hipchat:*:*:*:*:*:jenkins:*:*

Information

Published : 2019-01-09 11:29

Updated : 2020-08-24 05:37


NVD link : CVE-2018-1000418

Mitre link : CVE-2018-1000418

Products Affected
No products.
CWE