Jenkins 插件 权限许可和访问控制问题漏洞

Jenkins is a Jenkins open source application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins Conjur Secrets Plugin 1.0.11 and earlier versions are vulnerable to an authorization issue that stems from not...

GHSA-CW68-XMM4-C83R Agent-to-controller security bypass in Jenkins Conjur Secrets Plugin allows retrieving all credentials

Jenkins Conjur Secrets Plugin 1.0.9 and earlier implements functionality that allows attackers able to control agent processes to retrieve all username/password credentials stored on the Jenkins controller...

Agent-to-controller security bypass in Jenkins Conjur Secrets Plugin allows retrieving all credentials

Jenkins Conjur Secrets Plugin 1.0.9 and earlier implements functionality that allows attackers able to control agent processes to retrieve all username/password credentials stored on the Jenkins controller...

GHSA-G7FX-MMJC-R7GV Agent-to-controller security bypass in Jenkins Conjur Secrets Plugin allows decrypting secrets

Jenkins Conjur Secrets Plugin 1.0.9 and earlier implements functionality that allows attackers able to control agent processes to decrypt secrets stored in Jenkins obtained through another method...

Agent-to-controller security bypass in Jenkins Conjur Secrets Plugin allows decrypting secrets

Jenkins Conjur Secrets Plugin 1.0.9 and earlier implements functionality that allows attackers able to control agent processes to decrypt secrets stored in Jenkins obtained through another method...

CVE-2022-23117

Jenkins Conjur Secrets Plugin 1.0.9 and earlier implements functionality that allows attackers able to control agent processes to retrieve all username/password credentials stored on the Jenkins controller...

CVE-2022-23116

Jenkins Conjur Secrets Plugin 1.0.9 and earlier implements functionality that allows attackers able to control agent processes to decrypt secrets stored in Jenkins obtained through another method...

CVE-2022-23117

Jenkins Conjur Secrets Plugin 1.0.9 and earlier implements functionality that allows attackers able to control agent processes to retrieve all username/password credentials stored on the Jenkins controller...

CVE-2022-23116

Jenkins Conjur Secrets Plugin 1.0.9 and earlier implements functionality that allows attackers able to control agent processes to decrypt secrets stored in Jenkins obtained through another method...

CVE-2022-23116

Jenkins Conjur Secrets Plugin 1.0.9 and earlier implements functionality that allows attackers able to control agent processes to decrypt secrets stored in Jenkins obtained through another method...

CVE-2022-23117

Jenkins Conjur Secrets Plugin 1.0.9 and earlier implements functionality that allows attackers able to control agent processes to retrieve all username/password credentials stored on the Jenkins controller...

Security feature bypass

Jenkins Conjur Secrets Plugin 1.0.9 and earlier implements functionality that allows attackers able to control agent processes to decrypt secrets stored in Jenkins obtained through another method...

Default credentials

Jenkins Conjur Secrets Plugin 1.0.9 and earlier implements functionality that allows attackers able to control agent processes to retrieve all username/password credentials stored on the Jenkins controller...

CVE-2022-23117

Jenkins Conjur Secrets Plugin 1.0.9 and earlier implements functionality that allows attackers able to control agent processes to retrieve all username/password credentials stored on the Jenkins controller...

CVE-2022-23117

CVE-2022-23117 refers to the Jenkins Conjur Secrets Plugin (versions 1.0.9 and earlier). The description in connected documents states that attackers who can control agent processes can retrieve all username/password credentials stored on the Jenkins controller. The risk is limited to credentials...

CVE-2022-23116

Jenkins Conjur Secrets Plugin 1.0.9 and earlier implements functionality that allows attackers able to control agent processes to decrypt secrets stored in Jenkins obtained through another method...

CVE-2022-23116

CVE-2022-23116 affects Jenkins Conjur Secrets Plugin 1.0.9 and earlier. The issue, described across the CVE entries, states that attackers who can control agent processes can decrypt secrets stored in Jenkins that were obtained through another method. The Red Hat and OSV entries corroborate the s...

PT-2022-15860 · Jenkins · Jenkins Conjur Secrets Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Conjur Secrets Plugin versions 1.0.9 and earlier Description: The issue allows attackers who can control agent processes to retrieve all username/password credentials stored on the Jenkins controller. This is due to the implementation...

Jenkins Plugin 安全漏洞

Jenkins Plugin is an open source application for Jenkins. Jenkins Plugin Conjur Secrets Plugin 1.0.9 and earlier versions have a security vulnerability that allows an attacker to exploit the vulnerability to take control of an agent process to decrypt the functionality of secrets stored in Jenkin...

PT-2022-15859 · Jenkins · Jenkins Conjur Secrets Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Conjur Secrets Plugin versions 1.0.9 and earlier Description: The issue allows attackers who can control agent processes to decrypt secrets stored in Jenkins, which were obtained through another method. This is possible due to the...