Jenkins: >> Saltstack >> 1.4.2 Security Vulnerabilities
An exposure of sensitive information vulnerability exists in Jenkins SaltStack Plugin 3.1.6 and earlier in SaltAPIBuilder.java, SaltAPIStep.java that allows attackers to capture credentials with a known credentials ID stored in Jenkins.
CVSS Score
7.5
EPSS Score
0.001
Published
2018-08-01