VYPR

AWS Codebuild

by Jenkins Project

CVEs (1)

  • CVE-2018-1000404HigJul 9, 2018
    risk 0.44cvss 7.8epss 0.00

    Jenkins project Jenkins AWS CodeBuild Plugin version 0.26 and earlier contains a Insufficiently Protected Credentials vulnerability in AWSClientFactory.java, CodeBuilder.java that can result in Credentials Disclosure. This attack appear to be exploitable via local file access.…