Skip to content
OpenAdvisories

Package · Maven

com.amazonaws:codedeploy

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.8
    CVE-2018-1000403

    AWS CodeDeploy Plugin stored AWS Secret Key in plain text

    Jenkins project Jenkins AWS CodeDeploy Plugin version 1.19 and earlier contains a Insufficiently Protected Credentials vulnerability in AWSCodeDeployPublisher.java that can result in Credentials Disclosure. This attack appear to be exploitable via local file …

    com.amazonaws:codedeploy Maven
  • Medium 4.3
    CVE-2018-1000402

    Jenkins AWS CodeDeploy Plugin has Insufficiently Protected Credentials

    Jenkins project Jenkins AWS CodeDeploy Plugin version 1.19 and earlier contains a File and Directory Information Exposure vulnerability in AWSCodeDeployPublisher.java that can result in Disclosure of environment variables. This vulnerability appears to have b…

    com.amazonaws:codedeploy Maven