Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-8pmu-w794-zfeq
Vulnerability ID VCID-8pmu-w794-zfeq
Aliases CVE-2018-1000402
GHSA-644j-jcc4-crx7
Summary
Status Published
Exploitability 0.5
Weighted Severity 6.2
Risk 3.1
Affected and Fixed Packages Package Details
Weaknesses (4)
CWE-522 Insufficiently Protected Credentials
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.00039 https://api.first.org/data/v1/epss?cve=CVE-2018-1000402
epss 0.00039 https://api.first.org/data/v1/epss?cve=CVE-2018-1000402
epss 0.00039 https://api.first.org/data/v1/epss?cve=CVE-2018-1000402
epss 0.00039 https://api.first.org/data/v1/epss?cve=CVE-2018-1000402
cvssv3.1_qr MODERATE https://github.com/advisories/GHSA-644j-jcc4-crx7
cvssv3.1 4.3 https://github.com/jenkinsci/aws-codedeploy-plugin/commit/4bef70636dbcb9e773d4a4a6186726719cb88ee4
generic_textual MODERATE https://github.com/jenkinsci/aws-codedeploy-plugin/commit/4bef70636dbcb9e773d4a4a6186726719cb88ee4
cvssv3.1 4.3 https://github.com/jenkinsci/aws-codedeploy-plugin/commit/a086092ddf79d0b232e44f5908e8b6ef3dfcde9d
generic_textual MODERATE https://github.com/jenkinsci/aws-codedeploy-plugin/commit/a086092ddf79d0b232e44f5908e8b6ef3dfcde9d
cvssv3.1 4.3 https://jenkins.io/security/advisory/2018-06-25/#SECURITY-825
generic_textual MODERATE https://jenkins.io/security/advisory/2018-06-25/#SECURITY-825
cvssv3.1 4.3 https://nvd.nist.gov/vuln/detail/CVE-2018-1000402
generic_textual MODERATE https://nvd.nist.gov/vuln/detail/CVE-2018-1000402
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2018-1000402
https://github.com/jenkinsci/aws-codedeploy-plugin/commit/4bef70636dbcb9e773d4a4a6186726719cb88ee4
https://github.com/jenkinsci/aws-codedeploy-plugin/commit/a086092ddf79d0b232e44f5908e8b6ef3dfcde9d
https://jenkins.io/security/advisory/2018-06-25/#SECURITY-825
https://nvd.nist.gov/vuln/detail/CVE-2018-1000402
GHSA-644j-jcc4-crx7 https://github.com/advisories/GHSA-644j-jcc4-crx7
No exploits are available.
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N Found at https://github.com/jenkinsci/aws-codedeploy-plugin/commit/4bef70636dbcb9e773d4a4a6186726719cb88ee4
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N Found at https://github.com/jenkinsci/aws-codedeploy-plugin/commit/a086092ddf79d0b232e44f5908e8b6ef3dfcde9d
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N Found at https://jenkins.io/security/advisory/2018-06-25/#SECURITY-825
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2018-1000402
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.12026
EPSS Score 0.00039
Published At June 11, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-12T01:41:17.598907+00:00 EPSS Importer Import https://epss.cyentia.com/epss_scores-current.csv.gz 38.6.0