GHSA-HCH9-6QRJ-5F49 Jenkins Kubernetes CI/CD Plugin vulnerable to Improper Authorization

A missing permission check in Jenkins ElasticBox Jenkins Kubernetes CI/CD Plugin allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins. Note: Jenkins h...

Jenkins Kubernetes CI/CD Plugin vulnerable to Improper Authorization

A missing permission check in Jenkins ElasticBox Jenkins Kubernetes CI/CD Plugin allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins. Note: Jenkins h...

Cleartext Storage of Sensitive Information in Jenkins ElasticBox CI Plugin

Jenkins ElasticBox CI Plugin stores credentials unencrypted in the global config.xml configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

GHSA-R9XC-54CQ-99R7 Cleartext Storage of Sensitive Information in Jenkins ElasticBox CI Plugin

Jenkins ElasticBox CI Plugin stores credentials unencrypted in the global config.xml configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

com.coravy.hudson.plugins.github:github (>=1.9, <=1.13.3), com.elasticbox.jenkins-ci.plugins:elasticbox (>=4.0.9, <=4.1.0) +4 more potentially affected by CVE-2022-30947 via org.jenkins-ci.plugins:git (2.0)

org.jenkins-ci.plugins:git MAVEN version 2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - com.coravy.hudson.plugins.github:github =1.9, =4.0.9, =0.9.14, =1.8, =1.4.0, =1.4.2 Source cves: CVE-2022-309...

com.coravy.hudson.plugins.github:github (>=1.9, <=1.13.3), com.elasticbox.jenkins-ci.plugins:elasticbox (>=4.0.9, <=4.1.0) +5 more potentially affected by CVE-2017-1000242 via org.jenkins-ci.plugins:git-client (1.4.4)

org.jenkins-ci.plugins:git-client MAVEN version 1.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - com.coravy.hudson.plugins.github:github =1.9, =4.0.9, =0.9.14, =1.8, =1.4.0, =1.4.2 Source...

com.coravy.hudson.plugins.github:github (>=1.14.0-alpha-1, <=1.27.0), com.elasticbox.jenkins-ci.plugins:elasticbox (>=4.1.1, <=4.1.6) +12 more potentially affected by CVE-2017-1000242 via org.jenkins-ci.plugins:git-client (1.18.0)

org.jenkins-ci.plugins:git-client MAVEN version 1.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - com.coravy.hudson.plugins.github:github =1.14.0-alpha-1, =4.1.1, =1.0, =1.1.0, =1.33.2, =1.0...

org.jenkins-ci.main:jenkins-test-harness (1.551), org.jenkins-ci.main:jenkins-war (1.551) +4 more potentially affected by CVE-2018-1000406 via org.jenkins-ci.main:jenkins-core (1.551)

org.jenkins-ci.main:jenkins-core MAVEN version 1.551 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.551 - org.jenkins-ci.main:jenkins-war 1.551 -...

org.jenkins-ci.main:jenkins-test-harness (1.581), org.jenkins-ci.main:jenkins-war (1.581) +5 more potentially affected by CVE-2017-1000395 via org.jenkins-ci.main:jenkins-core (1.581)

org.jenkins-ci.main:jenkins-core MAVEN version 1.581 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.581 - org.jenkins-ci.main:jenkins-war 1.581 -...

com.elasticbox.jenkins-ci.plugins:elasticbox (>=4.0.9, <=4.1.0), org.jenkins-ci.lib:xtrigger-lib (0.36) +5 more potentially affected by CVE-2018-1999047 via org.jenkins-ci.main:jenkins-core (1.644)

org.jenkins-ci.main:jenkins-core MAVEN version 1.644 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.elasticbox.jenkins-ci.plugins:elasticbox =4.0.9, =4.0.4, =1.0.45, =1.0.47 Source cves:...

org.jenkins-ci.main:jenkins-test-harness (1.573), org.jenkins-ci.main:jenkins-war (1.573) +3 more potentially affected by CVE-2018-1999047 via org.jenkins-ci.main:jenkins-core (1.573)

org.jenkins-ci.main:jenkins-core MAVEN version 1.573 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.573 - org.jenkins-ci.main:jenkins-war 1.573 -...

org.jenkins-ci.main:jenkins-test-harness (1.551), org.jenkins-ci.main:jenkins-war (1.551) +4 more potentially affected by CVE-2018-1999047 via org.jenkins-ci.main:jenkins-core (1.551)

org.jenkins-ci.main:jenkins-core MAVEN version 1.551 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.551 - org.jenkins-ci.main:jenkins-war 1.551 -...

org.jenkins-ci.main:jenkins-test-harness (1.573), org.jenkins-ci.main:jenkins-war (1.573) +3 more potentially affected by CVE-2017-2602 via org.jenkins-ci.main:jenkins-core (1.573)

org.jenkins-ci.main:jenkins-core MAVEN version 1.573 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.573 - org.jenkins-ci.main:jenkins-war 1.573 -...

org.jenkins-ci.main:jenkins-test-harness (1.581), org.jenkins-ci.main:jenkins-war (1.581) +5 more potentially affected by CVE-2017-2613 via org.jenkins-ci.main:jenkins-core (1.581)

org.jenkins-ci.main:jenkins-core MAVEN version 1.581 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.581 - org.jenkins-ci.main:jenkins-war 1.581 -...

com.elasticbox.jenkins-ci.plugins:elasticbox (>=4.0.9, <=4.1.0), org.jenkins-ci.lib:xtrigger-lib (0.36) +5 more potentially affected by CVE-2017-2613 via org.jenkins-ci.main:jenkins-core (1.644)

org.jenkins-ci.main:jenkins-core MAVEN version 1.644 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.elasticbox.jenkins-ci.plugins:elasticbox =4.0.9, =4.0.4, =1.0.45, =1.0.47 Source cves:...

com.elasticbox.jenkins-ci.plugins:elasticbox (>=4.0.9, <=4.1.0), org.jenkins-ci.lib:xtrigger-lib (0.36) +5 more potentially affected by CVE-2017-1000400 via org.jenkins-ci.main:jenkins-core (1.644)

org.jenkins-ci.main:jenkins-core MAVEN version 1.644 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.elasticbox.jenkins-ci.plugins:elasticbox =4.0.9, =4.0.4, =1.0.45, =1.0.47 Source cves:...

org.jenkins-ci.main:jenkins-test-harness (1.573), org.jenkins-ci.main:jenkins-war (1.573) +3 more potentially affected by CVE-2017-1000400 via org.jenkins-ci.main:jenkins-core (1.573)

org.jenkins-ci.main:jenkins-core MAVEN version 1.573 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.573 - org.jenkins-ci.main:jenkins-war 1.573 -...

org.jenkins-ci.main:jenkins-test-harness (1.573), org.jenkins-ci.main:jenkins-war (1.573) +3 more potentially affected by CVE-2018-1999002 via org.jenkins-ci.main:jenkins-core (1.573)

org.jenkins-ci.main:jenkins-core MAVEN version 1.573 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.573 - org.jenkins-ci.main:jenkins-war 1.573 -...

com.elasticbox.jenkins-ci.plugins:elasticbox (>=4.0.9, <=4.1.0), org.jenkins-ci.lib:xtrigger-lib (0.36) +5 more potentially affected by CVE-2018-1999007 via org.jenkins-ci.main:jenkins-core (1.644)

org.jenkins-ci.main:jenkins-core MAVEN version 1.644 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.elasticbox.jenkins-ci.plugins:elasticbox =4.0.9, =4.0.4, =1.0.45, =1.0.47 Source cves:...

org.jenkins-ci.main:jenkins-test-harness (1.551), org.jenkins-ci.main:jenkins-war (1.551) +4 more potentially affected by CVE-2018-1999002 via org.jenkins-ci.main:jenkins-core (1.551)

org.jenkins-ci.main:jenkins-core MAVEN version 1.551 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.551 - org.jenkins-ci.main:jenkins-war 1.551 -...