Skip to content
OpenAdvisories

Package · Maven

org.jvnet.hudson.plugins:perforce

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 6.5
    CVE-2018-1000145

    Jenkins Perforce Plugin uses ineffective credentials encryption

    An exposure of sensitive information vulnerability exists in Jenkins Perforce Plugin version 1.3.36 and older in PerforcePasswordEncryptor.java that allows attackers with local file system access to obtain encrypted Perforce passwords and decrypt them.

    org.jvnet.hudson.plugins:perforce Maven
  • Medium 6.5
    CVE-2018-1000147

    Jenkins Perforce Plugin exposure of sensitive information vulnerability exists

    An exposure of sensitive information vulnerability exists in Jenkins Perforce Plugin version 1.3.36 and older in PerforcePasswordEncryptor.java that allows attackers with insufficient permission to obtain Perforce passwords configured in jobs to obtain them

    org.jvnet.hudson.plugins:perforce Maven