CVE-2018-1000419: Medium severity hipchat vulnerability
Published Jan 9, 2019
·Updated
An improper authorization vulnerability exists in Jenkins HipChat Plugin 2.2.0 and earlier in HipChatNotifier.java that allows attackers with Overall/Read access to obtain credentials IDs for credentials stored in Jenkins.
Affected Software
1 affected component
Atlassian Hipchat Jenkins<=2.2.0
Event History
Jan 9, 2019
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-1000419?
CVE-2018-1000419 is classified as a medium severity vulnerability.
2
How do I fix CVE-2018-1000419?
To fix CVE-2018-1000419, update the Jenkins HipChat Plugin to version 2.2.1 or later.
3
Who is affected by CVE-2018-1000419?
CVE-2018-1000419 affects users of Jenkins HipChat Plugin version 2.2.0 and earlier.
4
What does CVE-2018-1000419 allow attackers to do?
CVE-2018-1000419 allows attackers with Overall/Read access to obtain credential IDs from Jenkins.
5
When was CVE-2018-1000419 disclosed?
CVE-2018-1000419 was disclosed on September 25, 2018.