CVE-2018-1000150: Jenkins Reverse Proxy Auth

Low severity, CVSS 3.3. EPSS: 0.3% chance of exploitation in the next 30 days.

An exposure of sensitive information vulnerability exists in Jenkins Reverse Proxy Auth Plugin 1.5 and older in ReverseProxySecurityRealm#authContext that allows attackers with local file system access to obtain a list of authorities for logged in users.

Affected products

• Jenkins Reverse Proxy Auth: up to and including 1.5

Published 2018-04-05. Last modified 2026-06-17.