Read the docs

SonarSource

Records12All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

SonarSource records in CISA KEV

No SonarSource vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Sonarqube 6 records MEDIUM Jenkins Plugin 1 record LOW Sonarqube Docker Image 1 record MEDIUM Sonarqube Scanner 1 record LOW

Records

1 record in Sonarqube Scanner · all components

TI-2018-15898 CVE-2018-1000425 · GHSA-3ccq-gccx-pm7j

An insufficiently protected credentials vulnerability exists in Jenkins SonarQube Scanner…

Priority LOW 34

An insufficiently protected credentials vulnerability exists in Jenkins SonarQube Scanner Plugin 2.8 and earlier in SonarInstallation.java that allows attackers with local file system access to obtain the credentials use…

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00344 Published 2019-01-09 Fixed in 2.8.1 CWE-522
Open these records in search →