jenkins saltstack vulnerabilities

Latest jenkins saltstack CVEs

Newest publication first

1. CVE-2018-1999027 Jenkins SaltStack Plugin allows attackers to capture credentials with a known credentials ID stored in Jenkins

   Published 2018-08-01

   High·CVSS 7.5 EPSS 0.56%

   An exposure of sensitive information vulnerability exists in Jenkins SaltStack Plugin 3.1.6 and earlier in SaltAPIBuilder.java, SaltAPIStep.java that allows attackers to capture credentials with a known credentials ID stored in Jenkins.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.