CVE-2017-1000114
low
CVSS v3
3.1
CVSS v2
4.3
VIR risk
3.1
Description
Exposure of Sensitive Information in Jenkins Datadog plugin
Predictions
Exploit likelihood
42%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: cve@mitre.org — https://jenkins.io/security/advisory/2017-08-07/
Package impact
| Ecosystem | Package | Vulnerable | Fixed |
|---|---|---|---|
| Maven | org.datadog.jenkins.plugins:datadog | <0.6.2 | 0.6.2 |
Application impact
| Vendor | Product | Versions | Fixed |
|---|---|---|---|
| jenkins | datadog | {"endIncluding":"0.5.6"} | |
References
CWEs
CWE-200
Verify integrity in audit chain (admin only). AS-IS.