Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

1 record

Vendor: SonarSource Component: Sonarqube Scanner Clear all filters
TI-2018-15898 CVE-2018-1000425 · GHSA-3ccq-gccx-pm7j

An insufficiently protected credentials vulnerability exists in Jenkins SonarQube Scanner…

Priority LOW 34

An insufficiently protected credentials vulnerability exists in Jenkins SonarQube Scanner Plugin 2.8 and earlier in SonarInstallation.java that allows attackers with local file system access to obtain the credentials use…

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00344 Published 2019-01-09 Fixed in 2.8.1 CWE-522