CVE-2018-1999040

score

<0.1

cvss

8.8

epss

1.4%

published

2018-08-01

kev added

—

first seen

2026-10-21

Jenkins Kubernetes Plugin <= 1.10.1 contains a sensitive information exposure caused by insecure credential handling in KubernetesCloud.java, letting attackers retrieve stored credentials with a known credentials ID, exploit requires attacker to have access to Jenkins server.