CVE-2018-1000402: Infoleak
Jenkins project Jenkins AWS CodeDeploy Plugin version 1.19 and earlier contains a File and Directory Information Exposure vulnerability in AWSCodeDeployPublisher.java that can result in Disclosure of environment variables. This vulnerability appears to have been fixed in 1.20 and later.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Jenkins AWS CodeDeploy Pluginto a version that resolves this vulnerability.Fixed in 1.20
Event History
Frequently Asked Questions
What is the severity of CVE-2018-1000402?
The severity of CVE-2018-1000402 is considered low as it results in the exposure of environment variables.
How do I fix CVE-2018-1000402?
To fix CVE-2018-1000402, upgrade the Jenkins AWS CodeDeploy Plugin to version 1.20 or later.
What systems are affected by CVE-2018-1000402?
CVE-2018-1000402 affects Jenkins AWS CodeDeploy Plugin versions 1.19 and earlier.
What type of vulnerability is CVE-2018-1000402?
CVE-2018-1000402 is a File and Directory Information Exposure vulnerability.
What information can be disclosed due to CVE-2018-1000402?
CVE-2018-1000402 can result in the disclosure of sensitive environment variables.