CVE-2018-1000176

https://notcve.org/view.php?id=CVE-2018-1000176

08 May 2018 — An exposure of sensitive information vulnerability exists in Jenkins Email Extension Plugin 2.61 and older in src/main/resources/hudson/plugins/emailext/ExtendedEmailPublisher/global.groovy and ExtendedEmailPublisherDescriptor.java that allows attackers with control of a Jenkins administrator's web browser (e.g. malicious extension) to retrieve the configured SMTP password. Existe una vulnerabilidad de exposición de información sensible en el plugin Email Extension en versiones 2.61 y posteriores para Jenki... • https://jenkins.io/security/advisory/2018-04-16 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •