Skip to content
OpenAdvisories

Package · Maven

org.jvnet.hudson.plugins:hipchat

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 6.5
    CVE-2018-1000419

    Jenkins HipChat Plugin allows attackers with Overall/Read access to obtain credential IDs

    An improper authorization vulnerability exists in Jenkins HipChat Plugin 2.2.0 and earlier in HipChatNotifier.java that allows attackers with Overall/Read access to obtain credentials IDs for credentials stored in Jenkins.

    org.jvnet.hudson.plugins:hipchat Maven
  • High 8.8
    CVE-2018-1000418

    Jenkins HipChat Plugin allows credential capture due to incorrect authorization

    An improper authorization vulnerability exists in Jenkins HipChat Plugin 2.2.0 and earlier in HipChatNotifier.java that allows attackers with Overall/Read access to send test notifications to an attacker-specified HipChat server with attacker-specified creden…

    org.jvnet.hudson.plugins:hipchat Maven