CVE-2018-1000186

Description

A exposure of sensitive information vulnerability exists in Jenkins GitHub Pull Request Builder Plugin 1.41.0 and older in GhprbGitHubAuth.java that allows attackers with Overall/Read access to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins. Additionally, these form validation methods did not require POST requests, resulting in a CSRF vulnerability. As of version 1.42.0, these form validation methods require POST requests and Overall/Administer permissions.

How to fix CVE-2018-1000186

To remediate CVE-2018-1000186, upgrade the affected package to a fixed version below.

• —upgrade to 1.42.0 or later

Is CVE-2018-1000186 being exploited?

Low — EPSS is 0.1%, meaning exploitation activity has not been observed at scale.

Affected packages (1)

• from 0, < 1.42.0

CVSS scores

References (5)

• ADVISORYnvd.nist.gov/vuln/detail/CVE-2018-1000186
• PATCHgithub.com/jenkinsci/ghprb-plugin
• WEBgithub.com/jenkinsci/ghprb-plugin/commit/e78ee24f7056b8507992ef17a9bb74a1a31d8c11
• WEBjenkins.io/security/advisory/2018-06-04/#SECURITY-805