{"id":"CVE-2018-1000412","details":"An improper authorization vulnerability exists in Jenkins Jira Plugin 3.0.1 and earlier in JiraSite.java that allows attackers with Overall/Read access to have Jenkins connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.","aliases":["GHSA-fpg6-xqj4-j7wf"],"modified":"2026-07-08T14:58:32.090447Z","published":"2019-01-09T23:29:02.480Z","references":[{"type":"ADVISORY","url":"http://www.securityfocus.com/bid/106532"},{"type":"ADVISORY","url":"https://jenkins.io/security/advisory/2018-09-25/#SECURITY-1029"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/jenkinsci/jira-plugin","events":[{"introduced":"0"},{"last_affected":"d33a67ab2b874889c46087620165342304cb0479"}],"database_specific":{"cpe":"cpe:2.3:a:jenkins:jira:*:*:*:*:*:jenkins:*:*","extracted_events":[{"introduced":"0"},{"last_affected":"3.0.1"}],"source":"CPE_RANGE"}}],"versions":["jira-3.0.1","jira-3.0.0","jira-2.5.2","jira-2.5.1","jira-2.5","jira-2.4.2","jira-2.4","jira-2.3","jira-2.2.1","jira-2.2","jira-2.1","jira-2.0","jira-1.41","jira-1.40","jira-1.39","jira-1.37","jira-1.36","jira-1.35","jira-1.34","jira-1.33","jira-1.32","jira-1.31","jira-1.30","jira-1.29","jira-1.28","jira-1.27","jira-1.26"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-1000412.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}