Maven Artifact Choicelistprovider (Nexus)
Approved changes feed: RSS · Atom
cpe:2.3:a:jenkins:maven_artifact_choicelistprovider_\(nexus\):*:*:*:*:*:jenkins:*:*
part: a version: * update: *
| Vendor | Jenkins (d708d718-2e77-5ca3-ae9c-38ee4d256744) |
|---|---|
| Product | Maven Artifact Choicelistprovider (Nexus) (1fe8f353-b6ae-5f1f-9f6a-d3728e3366ad) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | jenkins |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-40347 |
vulnerable | 2026-06-08 06:09:42.112708 |
Details available
Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin 1.14 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to.
Published: 2023-08-16T14:32:56.439Z
Updated: 2024-10-08T18:25:42.222Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1999030 |
vulnerable | 2026-06-08 05:11:15.124857 |
Details available
An exposure of sensitive information vulnerability exists in Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin 1.3.1 and earlier in ArtifactoryChoiceListProvider.java, NexusChoiceListProvider.java, Nexus3ChoiceListProvider.java that allows attackers to capture credentials with a known credentials ID stored in Jenkins.
Published: 2018-08-01T13:00:00.000Z
Updated: 2024-09-16T17:07:55.145Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.