VULNERABILITY INTELLIGENCE

CVE-2018-1999035

CVSS score7.4 HIGH
EPSS probability0.86%
CISA KEVNot currently listed
Published2018-08-01
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Description

A man in the middle vulnerability exists in Jenkins Inedo BuildMaster Plugin 1.3 and earlier in BuildMasterConfiguration.java, BuildMasterConfig.java, BuildMasterApi.java that allows attackers to impersonate any service that Jenkins connects to.

Weakness classification

  • CWE-295: Improper Certificate Validation

Primary references