Medium severity6.5NVD Advisory· Published Aug 1, 2018· Updated Jun 17, 2026

CVE-2018-1999031

Description

An exposure of sensitive information vulnerability exists in Jenkins meliora-testlab Plugin 1.14 and earlier in TestlabNotifier.java that allows attackers with file system access to the Jenkins master to obtain the API key stored in this plugin's configuration.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
org.jenkins-ci.plugins:meliora-testlabMaven	< 1.15	1.15

Affected products

Jenkins Project/Meliora Testlab
cpe:2.3:a:jenkins:meliora_testlab:*:*:*:*:*:jenkins:*:*
Range: <=1.14
ghsa-coords
pkg:maven/org.jenkins-ci.plugins/meliora-testlab
Range: < 1.15

Patches

Vulnerability mechanics

References

github.com/advisories/GHSA-3hw6-gc8h-9243ghsaADVISORY
jenkins.io/security/advisory/2018-07-30/nvdVendor AdvisoryWEB
nvd.nist.gov/vuln/detail/CVE-2018-1999031ghsaADVISORY
github.com/jenkinsci/meliora-testlab-plugin/commit/59d43d557aafcc4818439e01aa736fdeeb7f24d7ghsaWEB

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.001
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000