[org.csanchez.jenkins.plugins:kubernetes] Exposure of Sensitive Information in Jenkins Kubernetes Plugin

An exposure of sensitive information vulnerability exists in Jenkins Kubernetes Plugin 1.10.1 and earlier in KubernetesCloud.java that allows attackers to capture credentials with a known credentials ID stored in Jenkins.

References

• https://nvd.nist.gov/vuln/detail/CVE-2018-1999040
• https://jenkins.io/security/advisory/2018-07-30/#SECURITY-1016
• https://github.com/advisories/GHSA-fqg2-c97r-rqcj