inedo-buildmaster showed plain text password in configuration form

inedo-buildmaster stores a service password in its global Jenkins configuration. While the password is stored encrypted on disk, it was transmitted in plain text as part of the configuration form. This could result in exposure of the password through browser extensions, cross-site scripting...

CloudBees Jenkins Inedo BuildMaster Plugin SSL/TLS Certificate Validation Vulnerability

CloudBees Jenkins is a Java-based continuous integration tool from CloudBees, which is mainly used to monitor continuous software version release/testing projects and some timed tasks.Inedo BuildMaster Plugin is used in which a plugin from BuildMaster collects version information and triggers a...

Authorization

A man in the middle vulnerability exists in Jenkins Inedo BuildMaster Plugin 1.3 and earlier in BuildMasterConfiguration.java, BuildMasterConfig.java, BuildMasterApi.java that allows attackers to impersonate any service that Jenkins connects to...

CVE-2018-1999035

A man in the middle vulnerability exists in Jenkins Inedo BuildMaster Plugin 1.3 and earlier in BuildMasterConfiguration.java, BuildMasterConfig.java, BuildMasterApi.java that allows attackers to impersonate any service that Jenkins connects to...

CVE-2018-1999035

A man in the middle vulnerability exists in Jenkins Inedo BuildMaster Plugin 1.3 and earlier in BuildMasterConfiguration.java, BuildMasterConfig.java, BuildMasterApi.java that allows attackers to impersonate any service that Jenkins connects to...

CVE-2018-1999035

A man in the middle vulnerability exists in Jenkins Inedo BuildMaster Plugin 1.3 and earlier in BuildMasterConfiguration.java, BuildMasterConfig.java, BuildMasterApi.java that allows attackers to impersonate any service that Jenkins connects to...

CVE-2018-1999035

The CVE-2018-1999035 entry concerns Jenkins Inedo BuildMaster Plugin (versions 1.3 and earlier). The connected sources describe a man-in-the-middle vulnerability that enables an attacker to impersonate any service that Jenkins connects to, affecting the plugin’s components BuildMasterConfiguratio...

CVE-2018-1999035

A man in the middle vulnerability exists in Jenkins Inedo BuildMaster Plugin 1.3 and earlier in BuildMasterConfiguration.java, BuildMasterConfig.java, BuildMasterApi.java that allows attackers to impersonate any service that Jenkins connects to...

CVE-2018-1999035: Improper Certificate Validation

A man in the middle vulnerability exists in Jenkins Inedo BuildMaster Plugin 1.3 and earlier in BuildMasterConfiguration.java, BuildMasterConfig.java, BuildMasterApi.java that allows attackers to impersonate any service that Jenkins connects to...

PT-2018-15214

Name of the Vulnerable Software and Affected Versions Jenkins Inedo BuildMaster Plugin versions 1.3 and earlier Description A man-in-the-middle issue exists that allows attackers to impersonate any service that Jenkins connects to. This is due to vulnerabilities in the...

Inedo BuildMaster Plugin globally and unconditionally disabled SSL/TLS certificate validation

Inedo ProGet Plugin unconditionally disabled SSL/TLS certificate validation for the entire Jenkins controller JVM. The plugin now has an option, disabled by default, to disable SSL/TLS certificate validation that only applies to its own connections...

Unspecified Vulnerability in Inedo BuildMaster

Inedo BuildMaster is a suite of automated deployment software from Inedo Japan. The software integrates a variety of tools to automate the deployment of application suites. A security vulnerability exists in versions of Inedo BuildMaster prior to 5.8.2, which stems from the program using...

Inedo BuildMaster Cross-Site Scripting Vulnerability

Inedo BuildMaster is a suite of automated deployment software from Inedo USA. The software integrates a variety of tools to automate the deployment of application suites. A cross-site scripting vulnerability exists in versions of Inedo BuildMaster prior to 5.8.2. A remote attacker can exploit thi...

Inedo BuildMaster Open Redirect Vulnerability

BuildMaster is a modern application release automation tool for creating simple or complex release pipelines for any organizational need. An open redirection vulnerability exists in Inedo BuildMaster versions prior to 5.8.2. A remote attacker can exploit this vulnerability to redirect users to...

Inedo BuildMaster Elevation of Privilege Vulnerability

Inedo BuildMaster is a suite of automated deployment software from Inedo USA. The software integrates a variety of tools to automate the deployment of application suites. A security vulnerability exists in versions of Inedo BuildMaster prior to 5.8.2 that stems from the program failing to properl...

CVE-2017-16520

Inedo BuildMaster before 5.8.2 does not properly restrict creation of RequireManageAllPrivileges event listeners...

Design/Logic Flaw

Inedo BuildMaster before 5.8.2 does not properly restrict creation of RequireManageAllPrivileges event listeners...

CVE-2017-16520

Inedo BuildMaster before 5.8.2 does not properly restrict creation of RequireManageAllPrivileges event listeners...

CVE-2017-16520

Inedo BuildMaster before 5.8.2 does not properly restrict creation of RequireManageAllPrivileges event listeners...

CVE-2017-16520

Inedo BuildMaster prior to 5.8.2 contains an Elevation of Privilege vulnerability: it does not properly restrict creation of RequireManageAllPrivileges event listeners, enabling an attacker to create event monitors. This is described across CVE-2017-16520 records and corroborated by CNVD-2017-364...