VYPR

AWS Codepipeline

by Jenkins Project

CVEs (1)

  • CVE-2018-1000401HigJul 9, 2018
    risk 0.44cvss 7.8epss 0.00

    Jenkins project Jenkins AWS CodePipeline Plugin version 0.36 and earlier contains a Insufficiently Protected Credentials vulnerability in AWSCodePipelineSCM.java that can result in Credentials Disclosure. This attack appear to be exploitable via local file access. This…