Description

An insufficiently protected credentials vulnerability exists in Jenkins Artifactory Plugin 2.16.1 and earlier in ArtifactoryBuilder.java, CredentialsConfig.java that allows attackers with local file system access to obtain old credentials configured for the plugin before it integrated with Credentials Plugin.

Remediation

References

CVE-2018-1000424

Related Vulnerabilities

WordPress Plugin Tablesome-Responsive Table, Woocommerce Automation, Email Log, Form Automation-Contact Form 7, Elementor, WPForms, Forminator Cross-Site Request Forgery (1.0.25)

MySQL CVE-2021-35546 Vulnerability (CVE-2021-35546)

WordPress Plugin AdRotate-Ad manager & AdSense Ads SQL Injection (3.9.4)

Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-1617)

Bootstrap Table Access of Resource Using Incompatible Type ('Type Confusion') Vulnerability (CVE-2021-23472)

Severity

High

Classification

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities CWE-522 CVE-2018-1000424