3290 matches found
CVE-2022-30697: Uncontrolled Search Path Element
Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Snap Deploy Windows before build 3640...
PT-2022-20240
Name of the Vulnerable Software and Affected Versions Acronis Snap Deploy Windows versions before build 3640 Description The issue is related to local privilege escalation due to insecure folder permissions. Recommendations For Acronis Snap Deploy Windows versions before build 3640, update to bui...
PT-2022-20238
Name of the Vulnerable Software and Affected Versions Acronis Snap Deploy Windows versions before build 3640 Description The issue is related to local privilege escalation due to excessive permissions assigned to child processes. Recommendations For Acronis Snap Deploy Windows versions before bui...
CVE-2022-30696: Uncontrolled Search Path Element
Local privilege escalation due to a DLL hijacking vulnerability. The following products are affected: Acronis Snap Deploy Windows before build 3640...
Acronis Snap Deploy security vulnerabilities
Acronis Snap Deploy, an Acronis platform for bulk deployment of system images, is vulnerable to an elevation of privilege vulnerability that stems from assigning too many privileges to child processes, which could be exploited by an attacker to cause a local elevation of privilege...
Acronis Snap Deploy security vulnerabilities
Acronis Snap Deploy is a platform for bulk deployment of system images from Acronis. Acronis Snap Deploy is vulnerable to an elevation of privilege vulnerability that could be exploited by an attacker to cause a local elevation of privilege...
Acronis Snap Deploy code-related vulnerabilities
Acronis Snap Deploy is an Acronis platform for bulk deployment of system images. Acronis Snap Deploy is vulnerable to a DLL hijacking vulnerability, which originates when a process attempts to load a DLL without specifying the absolute path to the DLL, and can be exploited by an attacker to cause...
PT-2022-20239
Name of the Vulnerable Software and Affected Versions Acronis Snap Deploy Windows versions prior to build 3640 Description The issue is related to a local privilege escalation due to a DLL hijacking vulnerability. Recommendations For Acronis Snap Deploy Windows versions prior to build 3640, updat...
org.eclipse.jetty:jetty-ajp (7.0.0.m0), org.eclipse.jetty:jetty-annotations (7.0.0.m0) +13 more potentially affected by CVE-2011-4461 via org.eclipse.jetty:jetty-server (7.0.0.m0)
org.eclipse.jetty:jetty-server MAVEN version 7.0.0.m0 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty:jetty-ajp 7.0.0.m0 - org.eclipse.jetty:jetty-annotations 7.0.0.m0 -...
org.cometd.java:cometd-java-demo (1.0.beta8), org.cometd.java:cometd-java-oort (1.0.beta8) +18 more potentially affected by CVE-2011-4461 via org.eclipse.jetty:jetty-server (7.0.0.m1)
org.eclipse.jetty:jetty-server MAVEN version 7.0.0.m1 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.cometd.java:cometd-java-demo 1.0.beta8 - org.cometd.java:cometd-java-oort 1.0.beta8 -...
Jenkins Deploy to container Plugin stored plain text passwords in job configuration
The Deploy to container Plugin stored passwords unencrypted as part of its configuration. This allowed users with Jenkins master local file system access, or users with Extended Read access to the jobs it is used in, to retrieve those passwords. The Deploy to container Plugin now integrates with...
GHSA-3Q6P-R6RR-266X Jenkins Deploy to container Plugin stored plain text passwords in job configuration
The Deploy to container Plugin stored passwords unencrypted as part of its configuration. This allowed users with Jenkins master local file system access, or users with Extended Read access to the jobs it is used in, to retrieve those passwords. The Deploy to container Plugin now integrates with...
@cicctencent/tars-deploy (>=1.0.1, <=1.0.10), @conga/framework-profiler (>=2.0.0, <=2.0.5) +12 more potentially affected by CVE-2017-1000220 via pidusage (>=1.0.1, <=1.1.4)
pidusage NPM version =1.0.1, =1.0.1, =2.0.0, =0.0.1, =0.1.0, =0.0.3, =0.0.1, =0.0.1, =0.0.1, =0.1.4-rc.1, =0.1.4 - shady-background 0.0.1 - shady-worker 0.0.4 - trek-status-monitor 0.3.3 - wf-pm2 1.1.3 Source cves: CVE-2017-1000220 Source advisory: OSV:GHSA-H2P3-H48H-9JJ7...
Jenkins Octopus Deploy Plugin stores credentials in plain text
Jenkins Octopus Deploy Plugin stores credentials unencrypted in its global configuration file hudson.plugins.octopusdeploy.OctopusDeployPlugin.xml on the Jenkins controller. These credentials can be viewed by users with access to the Jenkins controller file system...
GHSA-R798-QX7R-V3GW Jenkins Octopus Deploy Plugin stores credentials in plain text
Jenkins Octopus Deploy Plugin stores credentials unencrypted in its global configuration file hudson.plugins.octopusdeploy.OctopusDeployPlugin.xml on the Jenkins controller. These credentials can be viewed by users with access to the Jenkins controller file system...
GHSA-RWRX-HRF2-V577 Jenkins Serena SRA Deploy Plugin stores credentials in plain text
Jenkins Serena SRA Deploy Plugin stores credentials unencrypted in its global configuration file com.urbancode.ds.jenkins.plugins.serenarapublisher.UrbanDeployPublisher.xml on the Jenkins controller. These credentials can be viewed by users with access to the Jenkins controller file system...
Jenkins Serena SRA Deploy Plugin stores credentials in plain text
Jenkins Serena SRA Deploy Plugin stores credentials unencrypted in its global configuration file com.urbancode.ds.jenkins.plugins.serenarapublisher.UrbanDeployPublisher.xml on the Jenkins controller. These credentials can be viewed by users with access to the Jenkins controller file system...
com.aliyun.www:aliyun-container-service-deploy (>=0.1.0, <=0.1.1), io.fabric8.jenkins.plugins:openshift-sync (>=y, <=1.0.45) +15 more potentially affected by CVE-2018-1999002 via org.jenkins-ci.main:jenkins-core (1.651.2)
org.jenkins-ci.main:jenkins-core MAVEN version 1.651.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.aliyun.www:aliyun-container-service-deploy =0.1.0, =y, =1.0.4, =1.004, =1.0, =1.0.6,...
