Lucene search
+L

411 matches found

Github Security Blog
Github Security Blog
added 2022/05/13 1:17 a.m.29 views

Jenkins wildFly Deployer Plugin stores credentials in plain text

Jenkins WildFly Deployer Plugin stores deployment credentials unencrypted in job config.xml files on the Jenkins controller. These credentials can be viewed by users with Extended Read permission, or access to the Jenkins controller file system...

8.8CVSS6.8AI score0.01365EPSS
Exploits0References5Affected Software1
OSV
OSV
added 2022/05/13 1:15 a.m.12 views

GHSA-PH9F-H462-J5JG Jenkins Diawi Upload Plugin stores credentials in plain text

Jenkins Diawi Upload Plugin stores credentials unencrypted in job config.xml files on the Jenkins controller. These credentials can be viewed by users with Extended Read permission, or access to the Jenkins controller file system...

4.3CVSS8.7AI score0.01773EPSS
Exploits0References3
OSV
OSV
added 2022/05/13 1:15 a.m.23 views

GHSA-HMF2-PRM5-RVXM Jenkins mabl Plugin stores credentials in plain text

Jenkins mabl Plugin stores credentials unencrypted in job config.xml files on the Jenkins controller. These credentials can be viewed by users with Extended Read permission, or access to the Jenkins controller file system...

4.3CVSS8.7AI score0.01773EPSS
Exploits0References3
OSV
OSV
added 2022/05/13 1:15 a.m.13 views

GHSA-9M3C-XFHF-53MH Jenkins DeployHub Plugin stores credentials in plain text

Jenkins DeployHub Plugin stores credentials unencrypted in job config.xml files on the Jenkins controller. These credentials can be viewed by users with Extended Read permission, or access to the Jenkins controller file system...

4.3CVSS8.7AI score0.01773EPSS
Exploits0References5
OSV
OSV
added 2022/05/13 1:15 a.m.43 views

GHSA-GVHP-V4M2-3RWF Jenkins StarTeam Plugin stores credentials in plain text

Jenkins StarTeam Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

8.8CVSS8.7AI score0.01773EPSS
Exploits0References4
OSV
OSV
added 2022/05/13 1:15 a.m.36 views

GHSA-PXGR-RC8G-PJ7R Jenkins crittercism-dsym Plugin stores API key in plain text

Jenkins crittercism-dsym Plugin stores credentials unencrypted in job config.xml files on the Jenkins controller. These credentials can be viewed by users with Extended Read permission, or access to the Jenkins controller file system...

4.3CVSS8.7AI score0.01773EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2022/05/13 1:15 a.m.19 views

Jenkins StarTeam Plugin stores credentials in plain text

Jenkins StarTeam Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

8.8CVSS6.7AI score0.01773EPSS
Exploits0References5Affected Software1
Github Security Blog
Github Security Blog
added 2022/05/13 1:15 a.m.29 views

Jenkins Klaros-Testmanagement Plugin stores credentials in plain text

Jenkins Klaros-Testmanagement Plugin stores credentials unencrypted in job config.xml files on the Jenkins controller. These credentials can be viewed by users with Extended Read permission, or access to the Jenkins controller file system...

8.8CVSS6.8AI score0.01773EPSS
Exploits0References5Affected Software1
Github Security Blog
Github Security Blog
added 2022/05/13 1:15 a.m.21 views

Jenkins crittercism-dsym Plugin stores API key in plain text

Jenkins crittercism-dsym Plugin stores credentials unencrypted in job config.xml files on the Jenkins controller. These credentials can be viewed by users with Extended Read permission, or access to the Jenkins controller file system...

8.8CVSS6.8AI score0.01773EPSS
Exploits0References4Affected Software1
NVD
NVD
added 2022/04/12 8:15 p.m.26 views

CVE-2022-29052

Jenkins Google Compute Engine Plugin 4.3.8 and earlier stores private keys unencrypted in cloud agent config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system...

4.3CVSS0.00724EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2022/04/12 8:15 p.m.13 views

CVE-2022-29052

Jenkins Google Compute Engine Plugin 4.3.8 and earlier stores private keys unencrypted in cloud agent config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system...

4.3CVSS5.9AI score0.00724EPSS
Exploits0References2
Prion
Prion
added 2022/04/12 8:15 p.m.16 views

Design/Logic Flaw

Jenkins Google Compute Engine Plugin 4.3.8 and earlier stores private keys unencrypted in cloud agent config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system...

4CVSS4.5AI score0.00724EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2022/04/12 7:50 p.m.29 views

CVE-2022-29052

Jenkins Google Compute Engine Plugin 4.3.8 and earlier stores private keys unencrypted in cloud agent config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system...

5.2AI score0.00724EPSS
Exploits0References1
AlpineLinux
AlpineLinux
added 2022/04/12 7:50 p.m.70 views

CVE-2022-29052

Jenkins Google Compute Engine Plugin 4.3.8 and earlier stores private keys unencrypted in cloud agent config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system...

4.3CVSS3.8AI score0.00724EPSS
Exploits0References1
CNNVD
CNNVD
added 2022/04/12 12:0 a.m.7 views

Jenkins 安全漏洞

Jenkins is a Jenkins open source application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.A security vulnerability exists in the Jenkins Google Compute Engine Plugin, which stems from storing unencrypted private...

4.3CVSS5.7AI score0.00724EPSS
Exploits0References4
OSV
OSV
added 2022/03/16 12:0 a.m.23 views

GHSA-8G9W-5JV6-7M4X Personal tokens stored in plain text by Jenkins incapptic connect uploader Plugin

Jenkins incapptic connect uploader Plugin 1.15 and earlier stores tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system...

4.3CVSS4.8AI score0.00737EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2022/03/15 5:15 p.m.3 views

CVE-2022-27218

Jenkins incapptic connect uploader Plugin 1.15 and earlier stores tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system...

4.3CVSS5.9AI score0.00737EPSS
Exploits0References3
NVD
NVD
added 2022/03/15 5:15 p.m.25 views

CVE-2022-27217

Jenkins Vmware vRealize CodeStream Plugin 1.2 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system...

6.5CVSS0.00934EPSS
Exploits0References2
CNNVD
CNNVD
added 2022/03/15 12:0 a.m.11 views

Jenkins incapptic connect uploader 插件安全漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products. jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project. jenkins Plugin is an application. jenkins incapptic connect uploader Plug...

4.3CVSS5.7AI score0.00737EPSS
Exploits0References6
NVD
NVD
added 2020/11/04 3:15 p.m.34 views

CVE-2020-2318

Jenkins Mail Commander Plugin for Jenkins-ci Plugin 1.0.0 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system...

6.5CVSS6.5AI score0.01032EPSS
Exploits0References1
Rows per page
Query Builder