Missing permission check in Jenkins SOASTA CloudTest Plugin

A missing permission check in Jenkins SOASTA CloudTest Plugin in the CloudTestServer.DescriptorImpldoValidate form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server...

(0Day) Jenkins SOASTA CloudTest Cleartext Storage of Credentials Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Jenkins SOASTA CloudTest. Authentication is required to exploit this vulnerability. The specific flaw exists within the SOASTA CloudTest plugin. The issue results from storing credentials in...

Unspecified Vulnerability in CloudBees Jenkins SOASTA CloudTest Plugin

CloudBees Jenkins Hudson Labs is a set of Java-based development of continuous integration tools from the U.S. CloudBees. The product is mainly used to monitor the continuous software version of the release/test project and some timed tasks . SOASTA CloudTest Plugin is used in one of the mobile...

CVE-2019-10451

Jenkins SOASTA CloudTest Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

CVE-2019-10451

Jenkins SOASTA CloudTest Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

Design/Logic Flaw

Jenkins SOASTA CloudTest Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

CVE-2019-10451

Jenkins SOASTA CloudTest Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

CVE-2019-10451

This CVE affects the Jenkins SOASTA CloudTest Plugin. The vulnerability stems from credentials being stored unencrypted in the global configuration file on the Jenkins master/controller, specifically in com.soasta.jenkins.CloudTestServer.xml, enabling credentials to be viewed by users with filesy...

CVE-2019-10451

Jenkins SOASTA CloudTest Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

PT-2019-11845 · Jenkins · Jenkins Soasta Cloudtest Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins SOASTA CloudTest Plugin affected versions not specified Description: The issue concerns the storage of credentials in an unencrypted manner within the global configuration file on the Jenkins master or controller. Specifically, the...

CVE-2019-10451: Cleartext Storage of Sensitive Information

Jenkins SOASTA CloudTest Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

cloudtest stores API token in plain text

cloudtest stores credentials unencrypted in its global configuration file com.soasta.jenkins.CloudTestServer.xml on the Jenkins controller. These credentials could be viewed by users with access to the Jenkins controller file system. As of publication of this advisory there is no fix...

CloudBees Jenkins SOASTA CloudTest Plugin Authorization Issues Vulnerability

CloudBees Jenkins Hudson Labs is a set of Java-based development of continuous integration tools from the U.S. CloudBees. The product is mainly used to monitor the continuous software version of the release/test project and some timed tasks . SOASTA CloudTest Plugin is used in one of the mobile...

CVE-2019-11011

Akamai CloudTest before 58.30 allows remote code execution...

CVE-2019-11011

Akamai CloudTest before 58.30 allows remote code execution...

Remote code execution

Akamai CloudTest before 58.30 allows remote code execution...

CVE-2019-11011

Akamai CloudTest before 58.30 allows remote code execution...

CVE-2019-11011

CVE-2019-11011 affects Akamai CloudTest prior to version 58.30, where a remote code execution vulnerability is possible. The provided documents state the vulnerability and affected version but do not detail the underlying root cause, exploited components, or concrete remediation steps. No exploit...

CVE-2019-11011: Deserialization of Untrusted Data

Akamai CloudTest before 58.30 allows remote code execution...

PT-2019-12135

Name of the Vulnerable Software and Affected Versions Akamai CloudTest versions prior to 58.30 Description The issue allows remote code execution. Recommendations For versions prior to 58.30, update to version 58.30 or later to resolve the issue...