Vulnerabilities > CVE-2018-1000109 - Incorrect Authorization vulnerability in Jenkins Google-Play-Android-Publisher

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
LOW
Integrity impact
NONE
Availability impact
NONE
network
low complexity
jenkins
CWE-863
NVD
Published: 2018-03-13
Updated: 2019-10-03

Summary

An improper authorization vulnerability exists in Jenkins Google Play Android Publisher Plugin version 1.6 and earlier in GooglePlayBuildStepDescriptor.java that allow an attacker to obtain credential IDs.

Vulnerable Configurations

Part Description Count
Application
Jenkins
9

Common Weakness Enumeration (CWE)

References