{"id":"CVE-2018-1999033","details":"An exposure of sensitive information vulnerability exists in Jenkins Anchore Container Image Scanner Plugin 10.16 and earlier in AnchoreBuilder.java that allows attackers with Item/ExtendedRead permission or file system access to the Jenkins master to obtain the password stored in this plugin's configuration.","aliases":["GHSA-w9v7-7mq5-p27c"],"modified":"2026-07-08T16:26:47.771393Z","published":"2018-08-01T13:29:00.733Z","references":[{"type":"ADVISORY","url":"https://jenkins.io/security/advisory/2018-07-30/#SECURITY-1039"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/jenkinsci/anchore-container-scanner-plugin","events":[{"introduced":"0"},{"last_affected":"8f96167fa2128c3235eee7a70b93b22518be2efc"}],"database_specific":{"cpe":"cpe:2.3:a:anchore:container_image_scanner:*:*:*:*:*:jenkins:*:*","extracted_events":[{"introduced":"0"},{"last_affected":"1.0.16"}],"source":"CPE_RANGE"}}],"versions":["anchore-container-scanner-1.0.16","anchore-container-scanner-1.0.15","anchore-container-scanner-1.0.14","anchore-container-scanner-1.0.13","anchore-container-scanner-1.0.12","anchore-container-scanner-1.0.11","anchore-container-scanner-1.0.9","anchore-container-scanner-1.0.8","anchore-container-scanner-1.0.7","anchore-container-scanner-1.0.6","anchore-container-scanner-1.0.5","anchore-container-scanner-1.0.4","anchore-container-scanner-1.0.3","anchore-container-scanner-1.0.2","anchore-container-scanner-1.0.1","anchore-container-scanner-1.0.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-1999033.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"}]}