Sonarqube Scanner

DATE	CVE	VULNERABILITY TITLE	RISK
2019-01-09	CVE-2018-1000425	Insufficiently Protected Credentials vulnerability in Sonarsource Sonarqube Scanner An insufficiently protected credentials vulnerability exists in Jenkins SonarQube Scanner Plugin 2.8 and earlier in SonarInstallation.java that allows attackers with local file system access to obtain the credentials used to connect to SonarQube. local low complexity sonarsource CWE-522	7.8