What is CVE-2017-1000114?

CVE-2017-1000114 is a low-severity vulnerability in Jenkins Datadog, classified under Information Disclosure. CVSS score: 3.1/10. Published 2017-10-05.

How severe is CVE-2017-1000114?

Low severity. CVSS v3 base score is 3.1 out of 10.

Information disclosure in Jenkins Datadog

CVE-2017-1000114

The Datadog Plugin stores an API key to access the Datadog service in the global Jenkins configuration. While the API key is stored encrypted on disk, it was transmitted in plain text as part of the configuration form. This could result in exposure of the API key for example through browser extensions or cross-site scripting vulnerabilities. The Datadog Plugin now encrypts the API key transmitted to administrators viewing the global configuration form.

Vulnerability class: Information Disclosure

EPSS: 0.010 (60.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 3.1 (Low). Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N.

Affected products

Jenkins Datadog
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)

Frequently asked questions

What is CVE-2017-1000114?: CVE-2017-1000114 is a low-severity vulnerability in Jenkins Datadog, classified under Information Disclosure. CVSS score: 3.1/10. Published 2017-10-05.
How severe is CVE-2017-1000114?: Low severity. CVSS v3 base score is 3.1 out of 10.