CVE-2018-1000197
1 advisory.
Maven/com.blackducksoftware.integration:blackduck-hub CVE-2018-1000197: high 8.1, EPSS 0.84%
Jenkins Black Duck Hub Plugin allowed any user with Overall/Read to read and write its configuration
Action: Upgrade com.blackducksoftware.integration:blackduck-hub to 3.1.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.1.0 | - |
Fixed versions
| 3.1.0 |
Sources
- osv: GHSA-crvq-mw2w-4cfx
- https://nvd.nist.gov/vuln/detail/CVE-2018-1000197
- https://jenkins.io/security/advisory/2018-05-09/#SECURITY-670
CVE-2018-1000197 · published · modified · JSON