CVE-2018-1000169
Exposure of Sensitive Information to an Unauthorized Actor in Jenkins
5.3 MediumFix available
An exposure of sensitive information vulnerability exists in Jenkins 2.115 and older, LTS 2.107.1 and older, in CLICommand.java and ViewOptionHandler.java that allows unauthorized attackers to confirm the existence of agents or views with an attacker-specified name by sending a CLI command to Jenkins.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- Low
- Integrity
- None
- Availability
- None
Exploit likelihood
1.38%Up 0.8 points since Apr 14, 2021
What each source reports
NVD Score used
An exposure of sensitive information vulnerability exists in Jenkins 2.115 and older, LTS 2.107.1 and older, in CLICommand.java and ViewOptionHandler.java that allows unauthorized attackers to confirm the existence of agents or views with an attacker-specified name by sending a CLI command to Jenkins.
- Record
CVE-2018-1000169- CVSS 3.0
- 5.3 Medium
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
An exposure of sensitive information vulnerability exists in Jenkins 2.115 and older, LTS 2.107.1 and older, in CLICommand.java and ViewOptionHandler.java that allows unauthorized attackers to confirm the existence of agents or views with an attacker-specified name by sending a CLI command to Jenkins.
- Record
CVE-2018-1000169- Updated
- 2026-11-02
EUVDEUVD-2022-3608 No score
An exposure of sensitive information vulnerability exists in Jenkins 2.115 and older, LTS 2.107.1 and older, in CLICommand.java and ViewOptionHandler.java that allows unauthorized attackers to confirm the existence of agents or views with an attacker-specified name by sending a CLI command to Jenkins.
- Record
EUVD-2022-3608- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-cpw3-x7gf-p872
Exposure of Sensitive Information to an Unauthorized Actor in Jenkins
An exposure of sensitive information vulnerability exists in Jenkins 2.115 and older, LTS 2.107.1 and older, in CLICommand.java and ViewOptionHandler.java that allows unauthorized attackers to confirm the existence of agents or views with an attacker-specified name by sending a CLI command to Jenkins.
- Record
GHSA-cpw3-x7gf-p872- CVSS 3.0
- 5.3 Medium
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
OSV
An exposure of sensitive information vulnerability exists in Jenkins 2.115 and older, LTS 2.107.1 and older, in CLICommand.java and ViewOptionHandler.java that allows unauthorized attackers to confirm the existence of agents or views with an attacker-specified name by sending a CLI command to Jenkins.
- Record
CVE-2018-1000169- CVSS 3.0
- 5.3 Medium
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
OSVGHSA-cpw3-x7gf-p872
Exposure of Sensitive Information to an Unauthorized Actor in Jenkins
An exposure of sensitive information vulnerability exists in Jenkins 2.115 and older, LTS 2.107.1 and older, in CLICommand.java and ViewOptionHandler.java that allows unauthorized attackers to confirm the existence of agents or views with an attacker-specified name by sending a CLI command to Jenkins.
- Record
GHSA-cpw3-x7gf-p872- CVSS 3.0
- 5.3 Medium
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
OSVRHBA-2018:1816
Red Hat Bug Fix Advisory: OpenShift Container Platform 3.10 RPM Release Advisory
- Record
RHBA-2018:1816- CVSS 3.0
- 3.7 Low
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
org.jenkins-ci.main:jenkins-coreMaven |
through 2.107.1 | 2.107.2 |
org.jenkins-ci.main:jenkins-coreMaven |
2.108 to 2.115 | 2.116 |
org.jenkins-ci.main:jenkins-coreMaven |
before 2.107.2, plus listed versions 1.3961.3971.3981.3991.400 Show 45 moreShow less1.4011.4031.4041.4051.4061.4071.4081.4091.409.11.409.21.409.31.4101.4111.4121.4131.4141.4151.4161.4171.4181.4191.4201.4211.4221.4231.4241.424.11.424.21.424.31.424.41.424.51.424.61.4251.4261.4271.4281.4291.4301.4311.4321.4331.4341.4351.4361.437 |
2.107.2 |
org.jenkins-ci.main:jenkins-coreMaven |
2.108 up to 2.116, plus listed versions 2.1092.1102.1112.1122.1132.1142.115 |
2.116 |
ansible-asb-modulesRed Hat:openshift:3.10::el7 |
before 0:0.2.1-1.el7 | 0:0.2.1-1.el7 |
ansible-kubernetes-modulesRed Hat:openshift:3.10::el7 |
before 0:0.4.0-8.el7 | 0:0.4.0-8.el7 |
ansible-service-brokerRed Hat:openshift:3.10::el7 |
before 0:1.2.17-1.el7 | 0:1.2.17-1.el7 |
ansible-service-broker-container-scriptsRed Hat:openshift:3.10::el7 |
before 0:1.2.17-1.el7 | 0:1.2.17-1.el7 |
ansible-service-broker-develRed Hat:openshift:3.10::el7 |
before 0:1.2.17-1.el7 | 0:1.2.17-1.el7 |
ansible-service-broker-selinuxRed Hat:openshift:3.10::el7 |
before 0:1.2.17-1.el7 | 0:1.2.17-1.el7 |
Show 194 moreShow less
| Package | Affected | Fixed |
|---|---|---|
apbRed Hat:openshift:3.10::el7 |
before 0:1.2.14-1.el7 | 0:1.2.14-1.el7 |
apb-base-scriptsRed Hat:openshift:3.10::el7 |
before 0:1.2.7-1.el7 | 0:1.2.7-1.el7 |
apb-container-scriptsRed Hat:openshift:3.10::el7 |
before 0:1.2.14-1.el7 | 0:1.2.14-1.el7 |
atomic-enterprise-service-catalogRed Hat:openshift:3.10::el7 |
before 1:3.10.14-1.git.1444.3b95d24.el7 | 1:3.10.14-1.git.1444.3b95d24.el7 |
atomic-enterprise-service-catalog-svcatRed Hat:openshift:3.10::el7 |
before 1:3.10.14-1.git.1444.3b95d24.el7 | 1:3.10.14-1.git.1444.3b95d24.el7 |
atomic-openshiftRed Hat:openshift:3.10::el7 |
before 0:3.10.14-1.git.0.ba8ae6d.el7 | 0:3.10.14-1.git.0.ba8ae6d.el7 |
atomic-openshift-clientsRed Hat:openshift:3.10::el7 |
before 0:3.10.14-1.git.0.ba8ae6d.el7 | 0:3.10.14-1.git.0.ba8ae6d.el7 |
atomic-openshift-clients-redistributableRed Hat:openshift:3.10::el7 |
before 0:3.10.14-1.git.0.ba8ae6d.el7 | 0:3.10.14-1.git.0.ba8ae6d.el7 |
atomic-openshift-cluster-autoscalerRed Hat:openshift:3.10::el7 |
before 0:3.10.14-1.git.0.5d093fd.el7 | 0:3.10.14-1.git.0.5d093fd.el7 |
atomic-openshift-deschedulerRed Hat:openshift:3.10::el7 |
before 0:3.10.14-1.git.299.3f3c30b.el7 | 0:3.10.14-1.git.299.3f3c30b.el7 |
atomic-openshift-docker-excluderRed Hat:openshift:3.10::el7 |
before 0:3.10.14-1.git.0.ba8ae6d.el7 | 0:3.10.14-1.git.0.ba8ae6d.el7 |
atomic-openshift-dockerregistryRed Hat:openshift:3.10::el7 |
before 0:3.10.14-1.git.387.07a726e.el7 | 0:3.10.14-1.git.387.07a726e.el7 |
atomic-openshift-excluderRed Hat:openshift:3.10::el7 |
before 0:3.10.14-1.git.0.ba8ae6d.el7 | 0:3.10.14-1.git.0.ba8ae6d.el7 |
atomic-openshift-hyperkubeRed Hat:openshift:3.10::el7 |
before 0:3.10.14-1.git.0.ba8ae6d.el7 | 0:3.10.14-1.git.0.ba8ae6d.el7 |
atomic-openshift-hypershiftRed Hat:openshift:3.10::el7 |
before 0:3.10.14-1.git.0.ba8ae6d.el7 | 0:3.10.14-1.git.0.ba8ae6d.el7 |
atomic-openshift-masterRed Hat:openshift:3.10::el7 |
before 0:3.10.14-1.git.0.ba8ae6d.el7 | 0:3.10.14-1.git.0.ba8ae6d.el7 |
atomic-openshift-metrics-serverRed Hat:openshift:3.10::el7 |
before 0:3.10.14-1.git.49.382fff9.el7 | 0:3.10.14-1.git.49.382fff9.el7 |
atomic-openshift-nodeRed Hat:openshift:3.10::el7 |
before 0:3.10.14-1.git.0.ba8ae6d.el7 | 0:3.10.14-1.git.0.ba8ae6d.el7 |
atomic-openshift-node-problem-detectorRed Hat:openshift:3.10::el7 |
before 0:3.10.14-1.git.198.04596af.el7 | 0:3.10.14-1.git.198.04596af.el7 |
atomic-openshift-podRed Hat:openshift:3.10::el7 |
before 0:3.10.14-1.git.0.ba8ae6d.el7 | 0:3.10.14-1.git.0.ba8ae6d.el7 |
atomic-openshift-sdn-ovsRed Hat:openshift:3.10::el7 |
before 0:3.10.14-1.git.0.ba8ae6d.el7 | 0:3.10.14-1.git.0.ba8ae6d.el7 |
atomic-openshift-template-service-brokerRed Hat:openshift:3.10::el7 |
before 0:3.10.14-1.git.0.ba8ae6d.el7 | 0:3.10.14-1.git.0.ba8ae6d.el7 |
atomic-openshift-testsRed Hat:openshift:3.10::el7 |
before 0:3.10.14-1.git.0.ba8ae6d.el7 | 0:3.10.14-1.git.0.ba8ae6d.el7 |
atomic-openshift-web-consoleRed Hat:openshift:3.10::el7 |
before 0:3.10.14-1.git.334.3197fdf.el7 | 0:3.10.14-1.git.334.3197fdf.el7 |
cockpitRed Hat:openshift:3.10::el7 |
before 0:155-1.el7 | 0:155-1.el7 |
cockpit-debuginfoRed Hat:openshift:3.10::el7 |
before 0:155-1.el7 | 0:155-1.el7 |
cockpit-kubernetesRed Hat:openshift:3.10::el7 |
before 0:155-1.el7 | 0:155-1.el7 |
cri-oRed Hat:openshift:3.10::el7 |
before 0:1.10.5-1.rhaos3.10.git4c81456.el7 | 0:1.10.5-1.rhaos3.10.git4c81456.el7 |
cri-toolsRed Hat:openshift:3.10::el7 |
before 0:1.0.0-5.rhaos3.10.git2e22a75.el7 | 0:1.0.0-5.rhaos3.10.git2e22a75.el7 |
cri-tools-debuginfoRed Hat:openshift:3.10::el7 |
before 0:1.0.0-5.rhaos3.10.git2e22a75.el7 | 0:1.0.0-5.rhaos3.10.git2e22a75.el7 |
csi-attacherRed Hat:openshift:3.10::el7 |
before 0:0.2.0-3.git27299be.el7 | 0:0.2.0-3.git27299be.el7 |
csi-attacher-debuginfoRed Hat:openshift:3.10::el7 |
before 0:0.2.0-3.git27299be.el7 | 0:0.2.0-3.git27299be.el7 |
csi-driver-registrarRed Hat:openshift:3.10::el7 |
before 0:0.2.0-1.el7 | 0:0.2.0-1.el7 |
csi-driver-registrar-debuginfoRed Hat:openshift:3.10::el7 |
before 0:0.2.0-1.el7 | 0:0.2.0-1.el7 |
csi-livenessprobeRed Hat:openshift:3.10::el7 |
before 0:0.0.1-1.gitff5b6a0.el7 | 0:0.0.1-1.gitff5b6a0.el7 |
csi-livenessprobe-debuginfoRed Hat:openshift:3.10::el7 |
before 0:0.0.1-1.gitff5b6a0.el7 | 0:0.0.1-1.gitff5b6a0.el7 |
csi-provisionerRed Hat:openshift:3.10::el7 |
before 0:0.2.0-2.el7 | 0:0.2.0-2.el7 |
csi-provisioner-debuginfoRed Hat:openshift:3.10::el7 |
before 0:0.2.0-2.el7 | 0:0.2.0-2.el7 |
dumb-initRed Hat:openshift:3.10::el7 |
before 0:1.1.3-12.el7 | 0:1.1.3-12.el7 |
dumb-init-debuginfoRed Hat:openshift:3.10::el7 |
before 0:1.1.3-12.el7 | 0:1.1.3-12.el7 |
elastic-curatorRed Hat:openshift:3.10::el7 |
before 0:3.5.0-2.el7 | 0:3.5.0-2.el7 |
elasticsearchRed Hat:openshift:3.10::el7 |
before 0:2.4.4-3.el7 | 0:2.4.4-3.el7 |
elasticsearch-cloud-kubernetesRed Hat:openshift:3.10::el7 |
before 0:2.4.4.01_redhat_1-1.el7 | 0:2.4.4.01_redhat_1-1.el7 |
fb303Red Hat:openshift:3.10::el7 |
before 0:0.9.1-15.el7 | 0:0.9.1-15.el7 |
fb303-develRed Hat:openshift:3.10::el7 |
before 0:0.9.1-15.el7 | 0:0.9.1-15.el7 |
fb303-javaRed Hat:openshift:3.10::el7 |
before 0:0.9.1-15.el7 | 0:0.9.1-15.el7 |
fluentdRed Hat:openshift:3.10::el7 |
before 0:0.12.42-1.el7 | 0:0.12.42-1.el7 |
fluentd-debuginfoRed Hat:openshift:3.10::el7 |
before 0:0.12.42-1.el7 | 0:0.12.42-1.el7 |
fluentd-docRed Hat:openshift:3.10::el7 |
before 0:0.12.42-1.el7 | 0:0.12.42-1.el7 |
golang-github-openshift-oauth-proxyRed Hat:openshift:3.10::el7 |
before 0:2.3-1.git57b68632.el7 | 0:2.3-1.git57b68632.el7 |
golang-github-openshift-prometheus-alert-bufferRed Hat:openshift:3.10::el7 |
before 0:0-2.gitceca8c1.el7 | 0:0-2.gitceca8c1.el7 |
golang-github-prometheus-alertmanagerRed Hat:openshift:3.10::el7 |
before 0:0.14.0-1.git30af4d0.el7 | 0:0.14.0-1.git30af4d0.el7 |
golang-github-prometheus-node_exporterRed Hat:openshift:3.10::el7 |
before 0:3.10.14-1.git.892.af036cb.el7 | 0:3.10.14-1.git.892.af036cb.el7 |
golang-github-prometheus-prometheusRed Hat:openshift:3.10::el7 |
before 0:2.2.1-1.gitbc6058c.el7 | 0:2.2.1-1.gitbc6058c.el7 |
golang-github-prometheus-promuRed Hat:openshift:3.10::el7 |
before 0:0-2.git85ceabc.el7 | 0:0-2.git85ceabc.el7 |
google-cloud-sdkRed Hat:openshift:3.10::el7 |
before 0:183.0.0-3.el7 | 0:183.0.0-3.el7 |
haproxyRed Hat:openshift:3.10::el7 |
before 0:1.8.8-1.el7 | 0:1.8.8-1.el7 |
haproxy-debuginfoRed Hat:openshift:3.10::el7 |
before 0:1.8.8-1.el7 | 0:1.8.8-1.el7 |
haproxy18Red Hat:openshift:3.10::el7 |
before 0:1.8.8-1.el7 | 0:1.8.8-1.el7 |
hawkular-openshift-agentRed Hat:openshift:3.10::el7 |
before 0:1.2.2-2.el7 | 0:1.2.2-2.el7 |
heapsterRed Hat:openshift:3.10::el7 |
before 0:1.3.0-3.el7 | 0:1.3.0-3.el7 |
image-inspectorRed Hat:openshift:3.10::el7 |
before 0:2.1.2-2.el7 | 0:2.1.2-2.el7 |
imagebuilderRed Hat:openshift:3.10::el7 |
before 0:0.0.1-1.el7 | 0:0.0.1-1.el7 |
jenkinsRed Hat:openshift:3.10::el7 |
before 0:2.107.3.1525883128-1.el7 | 0:2.107.3.1525883128-1.el7 |
jenkins-1Red Hat:openshift:3.10::el7 |
before 0:1.651.2-2.el7 | 0:1.651.2-2.el7 |
jenkins-2-pluginsRed Hat:openshift:3.10::el7 |
before 0:3.10.1525788236-1.el7 | 0:3.10.1525788236-1.el7 |
jenkins-plugin-ace-editorRed Hat:openshift:3.10::el7 |
before 0:1.1-10.el7 | 0:1.1-10.el7 |
jenkins-plugin-authentication-tokensRed Hat:openshift:3.10::el7 |
before 0:1.3-1.el7 | 0:1.3-1.el7 |
jenkins-plugin-blueoceanRed Hat:openshift:3.10::el7 |
before 0:1.1.2-1.el7 | 0:1.1.2-1.el7 |
jenkins-plugin-blueocean-autofavoriteRed Hat:openshift:3.10::el7 |
before 0:0.7-1.el7 | 0:0.7-1.el7 |
jenkins-plugin-blueocean-commonsRed Hat:openshift:3.10::el7 |
before 0:1.0.1-1.el7 | 0:1.0.1-1.el7 |
jenkins-plugin-blueocean-configRed Hat:openshift:3.10::el7 |
before 0:1.0.1-1.el7 | 0:1.0.1-1.el7 |
jenkins-plugin-blueocean-dashboardRed Hat:openshift:3.10::el7 |
before 0:1.0.1-1.el7 | 0:1.0.1-1.el7 |
jenkins-plugin-blueocean-display-urlRed Hat:openshift:3.10::el7 |
before 0:2.0-1.el7 | 0:2.0-1.el7 |
jenkins-plugin-blueocean-eventsRed Hat:openshift:3.10::el7 |
before 0:1.0.1-1.el7 | 0:1.0.1-1.el7 |
jenkins-plugin-blueocean-git-pipelineRed Hat:openshift:3.10::el7 |
before 0:1.0.1-1.el7 | 0:1.0.1-1.el7 |
jenkins-plugin-blueocean-github-pipelineRed Hat:openshift:3.10::el7 |
before 0:1.0.1-1.el7 | 0:1.0.1-1.el7 |
jenkins-plugin-blueocean-i18nRed Hat:openshift:3.10::el7 |
before 0:1.0.1-1.el7 | 0:1.0.1-1.el7 |
jenkins-plugin-blueocean-jwtRed Hat:openshift:3.10::el7 |
before 0:1.0.1-1.el7 | 0:1.0.1-1.el7 |
jenkins-plugin-blueocean-personalizationRed Hat:openshift:3.10::el7 |
before 0:1.0.1-1.el7 | 0:1.0.1-1.el7 |
jenkins-plugin-blueocean-pipeline-api-implRed Hat:openshift:3.10::el7 |
before 0:1.0.1-1.el7 | 0:1.0.1-1.el7 |
jenkins-plugin-blueocean-pipeline-editorRed Hat:openshift:3.10::el7 |
before 0:0.2.0-1.el7 | 0:0.2.0-1.el7 |
jenkins-plugin-blueocean-restRed Hat:openshift:3.10::el7 |
before 0:1.0.1-1.el7 | 0:1.0.1-1.el7 |
jenkins-plugin-blueocean-rest-implRed Hat:openshift:3.10::el7 |
before 0:1.0.1-1.el7 | 0:1.0.1-1.el7 |
jenkins-plugin-blueocean-webRed Hat:openshift:3.10::el7 |
before 0:1.0.1-1.el7 | 0:1.0.1-1.el7 |
jenkins-plugin-branch-apiRed Hat:openshift:3.10::el7 |
before 0:2.0.9-10.el7 | 0:2.0.9-10.el7 |
jenkins-plugin-cloudbees-folderRed Hat:openshift:3.10::el7 |
before 0:6.0.4-10.el7 | 0:6.0.4-10.el7 |
jenkins-plugin-credentialsRed Hat:openshift:3.10::el7 |
before 0:2.1.13-10.el7 | 0:2.1.13-10.el7 |
jenkins-plugin-credentials-bindingRed Hat:openshift:3.10::el7 |
before 0:1.11-1.el7 | 0:1.11-1.el7 |
jenkins-plugin-display-url-apiRed Hat:openshift:3.10::el7 |
before 0:2.0-10.el7 | 0:2.0-10.el7 |
jenkins-plugin-docker-commonsRed Hat:openshift:3.10::el7 |
before 0:1.6-1.el7 | 0:1.6-1.el7 |
jenkins-plugin-docker-workflowRed Hat:openshift:3.10::el7 |
before 0:1.11-1.el7 | 0:1.11-1.el7 |
jenkins-plugin-durable-taskRed Hat:openshift:3.10::el7 |
before 0:1.13-10.el7 | 0:1.13-10.el7 |
jenkins-plugin-favoriteRed Hat:openshift:3.10::el7 |
before 0:2.0.4-1.el7 | 0:2.0.4-1.el7 |
jenkins-plugin-gitRed Hat:openshift:3.10::el7 |
before 0:3.3.0-10.el7 | 0:3.3.0-10.el7 |
jenkins-plugin-git-clientRed Hat:openshift:3.10::el7 |
before 0:2.4.5-10.el7 | 0:2.4.5-10.el7 |
jenkins-plugin-git-serverRed Hat:openshift:3.10::el7 |
before 0:1.7-10.el7 | 0:1.7-10.el7 |
jenkins-plugin-githubRed Hat:openshift:3.10::el7 |
before 0:1.27.0-1.el7 | 0:1.27.0-1.el7 |
jenkins-plugin-github-apiRed Hat:openshift:3.10::el7 |
before 0:1.85-1.el7 | 0:1.85-1.el7 |
jenkins-plugin-github-branch-sourceRed Hat:openshift:3.10::el7 |
before 0:2.0.5-1.el7 | 0:2.0.5-1.el7 |
jenkins-plugin-handlebarsRed Hat:openshift:3.10::el7 |
before 0:1.1.1-10.el7 | 0:1.1.1-10.el7 |
jenkins-plugin-icon-shimRed Hat:openshift:3.10::el7 |
before 0:2.0.3-10.el7 | 0:2.0.3-10.el7 |
jenkins-plugin-jackson2-apiRed Hat:openshift:3.10::el7 |
before 0:2.7.3-1.el7 | 0:2.7.3-1.el7 |
jenkins-plugin-jquery-detachedRed Hat:openshift:3.10::el7 |
before 0:1.2.1-10.el7 | 0:1.2.1-10.el7 |
jenkins-plugin-junitRed Hat:openshift:3.10::el7 |
before 0:1.20-10.el7 | 0:1.20-10.el7 |
jenkins-plugin-kubernetesRed Hat:openshift:3.10::el7 |
before 0:0.11-10.el7 | 0:0.11-10.el7 |
jenkins-plugin-mailerRed Hat:openshift:3.10::el7 |
before 0:1.20-10.el7 | 0:1.20-10.el7 |
jenkins-plugin-mapdb-apiRed Hat:openshift:3.10::el7 |
before 0:1.0.9.0-10.el7 | 0:1.0.9.0-10.el7 |
jenkins-plugin-matrix-authRed Hat:openshift:3.10::el7 |
before 0:1.5-10.el7 | 0:1.5-10.el7 |
jenkins-plugin-matrix-projectRed Hat:openshift:3.10::el7 |
before 0:1.10-10.el7 | 0:1.10-10.el7 |
jenkins-plugin-mercurialRed Hat:openshift:3.10::el7 |
before 0:1.59-10.el7 | 0:1.59-10.el7 |
jenkins-plugin-metricsRed Hat:openshift:3.10::el7 |
before 0:3.1.2.9-1.el7 | 0:3.1.2.9-1.el7 |
jenkins-plugin-momentjsRed Hat:openshift:3.10::el7 |
before 0:1.1.1-10.el7 | 0:1.1.1-10.el7 |
jenkins-plugin-multiple-scmsRed Hat:openshift:3.10::el7 |
before 0:0.6-10.el7 | 0:0.6-10.el7 |
jenkins-plugin-openshift-clientRed Hat:openshift:3.10::el7 |
before 0:0.9.6-1.el7 | 0:0.9.6-1.el7 |
jenkins-plugin-openshift-loginRed Hat:openshift:3.10::el7 |
before 0:0.12-10.el7 | 0:0.12-10.el7 |
jenkins-plugin-openshift-pipelineRed Hat:openshift:3.10::el7 |
before 0:1.0.47-10.el7 | 0:1.0.47-10.el7 |
jenkins-plugin-openshift-syncRed Hat:openshift:3.10::el7 |
before 0:0.1.24-1.el7 | 0:0.1.24-1.el7 |
jenkins-plugin-pipeline-build-stepRed Hat:openshift:3.10::el7 |
before 0:2.1-10.el7 | 0:2.1-10.el7 |
jenkins-plugin-pipeline-graph-analysisRed Hat:openshift:3.10::el7 |
before 0:1.3-10.el7 | 0:1.3-10.el7 |
jenkins-plugin-pipeline-input-stepRed Hat:openshift:3.10::el7 |
before 0:2.7-10.el7 | 0:2.7-10.el7 |
jenkins-plugin-pipeline-milestone-stepRed Hat:openshift:3.10::el7 |
before 0:1.3.1-1.el7 | 0:1.3.1-1.el7 |
jenkins-plugin-pipeline-model-apiRed Hat:openshift:3.10::el7 |
before 0:1.1.4-1.el7 | 0:1.1.4-1.el7 |
jenkins-plugin-pipeline-model-declarative-agentRed Hat:openshift:3.10::el7 |
before 0:1.1.1-1.el7 | 0:1.1.1-1.el7 |
jenkins-plugin-pipeline-model-definitionRed Hat:openshift:3.10::el7 |
before 0:1.1.4-1.el7 | 0:1.1.4-1.el7 |
jenkins-plugin-pipeline-model-extensionsRed Hat:openshift:3.10::el7 |
before 0:1.1.4-1.el7 | 0:1.1.4-1.el7 |
jenkins-plugin-pipeline-rest-apiRed Hat:openshift:3.10::el7 |
before 0:2.6-10.el7 | 0:2.6-10.el7 |
jenkins-plugin-pipeline-stage-stepRed Hat:openshift:3.10::el7 |
before 0:2.2-10.el7 | 0:2.2-10.el7 |
jenkins-plugin-pipeline-stage-tags-metadataRed Hat:openshift:3.10::el7 |
before 0:1.1.4-1.el7 | 0:1.1.4-1.el7 |
jenkins-plugin-pipeline-stage-viewRed Hat:openshift:3.10::el7 |
before 0:2.6-10.el7 | 0:2.6-10.el7 |
jenkins-plugin-pipeline-utility-stepsRed Hat:openshift:3.10::el7 |
before 0:1.3.0-10.el7 | 0:1.3.0-10.el7 |
jenkins-plugin-plain-credentialsRed Hat:openshift:3.10::el7 |
before 0:1.4-10.el7 | 0:1.4-10.el7 |
jenkins-plugin-pubsub-lightRed Hat:openshift:3.10::el7 |
before 0:1.8-1.el7 | 0:1.8-1.el7 |
jenkins-plugin-scm-apiRed Hat:openshift:3.10::el7 |
before 0:2.1.1-10.el7 | 0:2.1.1-10.el7 |
jenkins-plugin-script-securityRed Hat:openshift:3.10::el7 |
before 0:1.29-1.el7 | 0:1.29-1.el7 |
jenkins-plugin-sse-gatewayRed Hat:openshift:3.10::el7 |
before 0:1.15-1.el7 | 0:1.15-1.el7 |
jenkins-plugin-ssh-credentialsRed Hat:openshift:3.10::el7 |
before 0:1.13-10.el7 | 0:1.13-10.el7 |
jenkins-plugin-structsRed Hat:openshift:3.10::el7 |
before 0:1.6-10.el7 | 0:1.6-10.el7 |
jenkins-plugin-subversionRed Hat:openshift:3.10::el7 |
before 0:2.7.2-10.el7 | 0:2.7.2-10.el7 |
jenkins-plugin-token-macroRed Hat:openshift:3.10::el7 |
before 0:2.1-1.el7 | 0:2.1-1.el7 |
jenkins-plugin-variantRed Hat:openshift:3.10::el7 |
before 0:1.1-1.el7 | 0:1.1-1.el7 |
jenkins-plugin-workflow-aggregatorRed Hat:openshift:3.10::el7 |
before 0:2.1-10.el7 | 0:2.1-10.el7 |
jenkins-plugin-workflow-apiRed Hat:openshift:3.10::el7 |
before 0:2.13-10.el7 | 0:2.13-10.el7 |
jenkins-plugin-workflow-basic-stepsRed Hat:openshift:3.10::el7 |
before 0:2.4-10.el7 | 0:2.4-10.el7 |
jenkins-plugin-workflow-cpsRed Hat:openshift:3.10::el7 |
before 0:2.30-10.el7 | 0:2.30-10.el7 |
jenkins-plugin-workflow-cps-global-libRed Hat:openshift:3.10::el7 |
before 0:2.8-10.el7 | 0:2.8-10.el7 |
jenkins-plugin-workflow-durable-task-stepRed Hat:openshift:3.10::el7 |
before 0:2.11-10.el7 | 0:2.11-10.el7 |
jenkins-plugin-workflow-jobRed Hat:openshift:3.10::el7 |
before 0:2.10-10.el7 | 0:2.10-10.el7 |
jenkins-plugin-workflow-multibranchRed Hat:openshift:3.10::el7 |
before 0:2.14-10.el7 | 0:2.14-10.el7 |
jenkins-plugin-workflow-remote-loaderRed Hat:openshift:3.10::el7 |
before 0:1.4-10.el7 | 0:1.4-10.el7 |
jenkins-plugin-workflow-scm-stepRed Hat:openshift:3.10::el7 |
before 0:2.4-10.el7 | 0:2.4-10.el7 |
jenkins-plugin-workflow-step-apiRed Hat:openshift:3.10::el7 |
before 0:2.9-10.el7 | 0:2.9-10.el7 |
jenkins-plugin-workflow-supportRed Hat:openshift:3.10::el7 |
before 0:2.14-10.el7 | 0:2.14-10.el7 |
kibanaRed Hat:openshift:3.10::el7 |
before 0:4.6.4-4.el7 | 0:4.6.4-4.el7 |
kibana-debuginfoRed Hat:openshift:3.10::el7 |
before 0:4.6.4-4.el7 | 0:4.6.4-4.el7 |
libthrift-javaRed Hat:openshift:3.10::el7 |
before 0:0.9.1-15.el7 | 0:0.9.1-15.el7 |
libthrift-javadocRed Hat:openshift:3.10::el7 |
before 0:0.9.1-15.el7 | 0:0.9.1-15.el7 |
libuvRed Hat:openshift:3.10::el7 |
before 1:1.7.5-3.el7 | 1:1.7.5-3.el7 |
libuv-debuginfoRed Hat:openshift:3.10::el7 |
before 1:1.7.5-3.el7 | 1:1.7.5-3.el7 |
libuv-develRed Hat:openshift:3.10::el7 |
before 1:1.7.5-3.el7 | 1:1.7.5-3.el7 |
libuv-staticRed Hat:openshift:3.10::el7 |
before 1:1.7.5-3.el7 | 1:1.7.5-3.el7 |
mariadb-apb-roleRed Hat:openshift:3.10::el7 |
before 0:1.2.5-1.el7 | 0:1.2.5-1.el7 |
mediawikiRed Hat:openshift:3.10::el7 |
before 0:1.27.4-8.el7 | 0:1.27.4-8.el7 |
mediawiki-apb-roleRed Hat:openshift:3.10::el7 |
before 0:1.2.8-1.el7 | 0:1.2.8-1.el7 |
mediawiki-container-scriptsRed Hat:openshift:3.10::el7 |
before 0:1.2.0-1.el7 | 0:1.2.0-1.el7 |
mediawiki-docRed Hat:openshift:3.10::el7 |
before 0:1.27.4-8.el7 | 0:1.27.4-8.el7 |
mysql-apb-roleRed Hat:openshift:3.10::el7 |
before 0:1.2.6-1.el7 | 0:1.2.6-1.el7 |
nodejsRed Hat:openshift:3.10::el7 |
before 0:4.7.2-1.el7 | 0:4.7.2-1.el7 |
nodejs-abbrevRed Hat:openshift:3.10::el7 |
before 0:1.0.7-1.el7aos | 0:1.0.7-1.el7aos |
nodejs-acceptsRed Hat:openshift:3.10::el7 |
before 0:1.3.3-1.el7 | 0:1.3.3-1.el7 |
nodejs-align-textRed Hat:openshift:3.10::el7 |
before 0:0.1.3-2.el7aos | 0:0.1.3-2.el7aos |
nodejs-amdefineRed Hat:openshift:3.10::el7 |
before 0:0.0.4-5.el7aos | 0:0.0.4-5.el7aos |
nodejs-ansi-regexRed Hat:openshift:3.10::el7 |
before 0:2.0.0-1.el7aos | 0:2.0.0-1.el7aos |
nodejs-ansi-stylesRed Hat:openshift:3.10::el7 |
before 0:2.1.0-1.el7aos | 0:2.1.0-1.el7aos |
nodejs-argparseRed Hat:openshift:3.10::el7 |
before 0:1.0.3-1.el7aos | 0:1.0.3-1.el7aos |
nodejs-array-flattenRed Hat:openshift:3.10::el7 |
before 0:1.1.1-1.el7aos | 0:1.1.1-1.el7aos |
nodejs-asapRed Hat:openshift:3.10::el7 |
before 0:2.0.3-1.el7aos | 0:2.0.3-1.el7aos |
nodejs-asn1Red Hat:openshift:3.10::el7 |
before 0:0.1.11-4.el7aos | 0:0.1.11-4.el7aos |
nodejs-assert-plusRed Hat:openshift:3.10::el7 |
before 0:0.1.4-1.el7aos | 0:0.1.4-1.el7aos |
nodejs-asyncRed Hat:openshift:3.10::el7 |
before 0:1.4.2-1.el7aos | 0:1.4.2-1.el7aos |
nodejs-aws-sign2Red Hat:openshift:3.10::el7 |
before 0:0.5.0-1.el7aos | 0:0.5.0-1.el7aos |
nodejs-balanced-matchRed Hat:openshift:3.10::el7 |
before 0:0.2.1-1.el7aos | 0:0.2.1-1.el7aos |
nodejs-base64urlRed Hat:openshift:3.10::el7 |
before 0:1.0.4-2.el7aos | 0:1.0.4-2.el7aos |
nodejs-basic-authRed Hat:openshift:3.10::el7 |
before 0:1.0.3-1.el7aos | 0:1.0.3-1.el7aos |
nodejs-blRed Hat:openshift:3.10::el7 |
before 0:1.0.0-3.el7aos | 0:1.0.0-3.el7aos |
nodejs-bluebirdRed Hat:openshift:3.10::el7 |
before 0:2.10.0-1.el7aos | 0:2.10.0-1.el7aos |
nodejs-body-parserRed Hat:openshift:3.10::el7 |
before 0:1.14.1-1.el7aos | 0:1.14.1-1.el7aos |
nodejs-boomRed Hat:openshift:3.10::el7 |
before 0:2.8.0-1.el7aos | 0:2.8.0-1.el7aos |
nodejs-brace-expansionRed Hat:openshift:3.10::el7 |
before 0:1.1.1-1.el7aos | 0:1.1.1-1.el7aos |
nodejs-bytesRed Hat:openshift:3.10::el7 |
before 0:2.1.0-1.el7aos | 0:2.1.0-1.el7aos |
nodejs-camelcaseRed Hat:openshift:3.10::el7 |
before 0:1.2.1-2.el7aos | 0:1.2.1-2.el7aos |
nodejs-camelcase-keysRed Hat:openshift:3.10::el7 |
before 0:1.0.0-2.el7aos | 0:1.0.0-2.el7aos |
nodejs-caselessRed Hat:openshift:3.10::el7 |
before 0:0.11.0-1.el7aos | 0:0.11.0-1.el7aos |
nodejs-center-alignRed Hat:openshift:3.10::el7 |
before 0:0.1.1-1.el7aos | 0:0.1.1-1.el7aos |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2018-1000169 is a medium vulnerability (CVSS 5.3) in Jenkins, published April 13, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.38%, the 72nd percentile. Fixed in org.jenkins-ci.main:jenkins-core 2.107.2.
References
jenkins.io/security/advisory/2018-04-11
access.redhat.com/errata/RHBA-2018:1816
nvd.nist.gov/vuln/detail/CVE-2018-1000169
github.com/jenkinsci/jenkins/commit/69a784bb8d2c5a021d225eda2d392fb081c1169e
bugzilla.redhat.com/show_bug.cgi?id=1278733
Show 194 moreShow less
security.access.redhat.com/data/csaf/v2/advisories/2018/rhba-2018_1816.json
cve.org/CVERecord?id=CVE-2018-1000169
This page doesn't list everything
Left out here: 412 versions and 119 references. The JSON record has them. Also not on the record: 367 package claims. ID and package lookups still check them.