CVE-2019-1003045

Description

A vulnerability in Jenkins ECS Publisher Plugin 1.0.0 and earlier allows attackers with Item/Extended Read permission, or local file system access to the Jenkins home directory to obtain the API token configured in this plugins configuration.

Risk Information

Base Score

6.5

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS Score

Exploitation Probability

0.693

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2019-1003045 are fixed in EACG-ecs-publisher 1.0.1	Windows
Vulnerabilities CVE-2019-1003045 are fixed in EACG-ecs-publisher for Linux 1.0.1	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234