CVE-2017-1000114

The Datadog Plugin stores an API key to access the Datadog service in the global Jenkins configuration. While the API key is stored encrypted on disk, it was transmitted in plain text as part of the configuration form. This could result in exposure of the API key for example through browser extensions or cross-site scripting vulnerabilities. The Datadog Plugin now encrypts the API key transmitted to administrators viewing the global configuration form.

• CWE-200

• http://www.securityfocus.com/bid/100223Third Party Advisory, VDB Entry
• https://jenkins.io/security/advisory/2017-08-07/Vendor Advisory
• http://www.securityfocus.com/bid/100223Third Party Advisory, VDB Entry
• https://jenkins.io/security/advisory/2017-08-07/Vendor Advisory

Published

Oct 5, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-1000108The Pipeline: Input Step Plugin by default allowed users wit…
• CVE-2017-1000109The custom Details view of the Static Analysis Utilities bas…
• CVE-2017-1000110Blue Ocean allows the creation of GitHub organization folder…
• CVE-2017-1000111Linux kernel: heap out-of-bounds in AF_PACKET sockets. This …7.8
• CVE-2017-1000112Linux kernel: Exploitable memory corruption due to UFO to no…7
• CVE-2017-1000113The Deploy to container Plugin stored passwords unencrypted …
• CVE-2017-1000115Mercurial prior to version 4.3 is vulnerable to a missing sy…
• CVE-2017-1000116Mercurial prior to 4.3 did not adequately sanitize hostnames…
• CVE-2017-1000117A malicious third-party can give a crafted "ssh://..." URL t…
• CVE-2017-1000118Akka HTTP versions <= 10.0.5 Illegal Media Range in Accept H…
• CVE-2017-1000119October CMS build 412 is vulnerable to PHP code execution in…
• CVE-2017-1000120[ERPNext][Frappe Version <= 7.1.27] SQL injection vulnerabil…