40 matches found
PT-2025-18958 · Inedo · Inedo Proget
Name of the Vulnerable Software and Affected Versions: Inedo ProGet versions 2024.22 and earlier Description: Inedo ProGet allows remote attackers to reach restricted functionality through the C reflection layer. This can be demonstrated by causing a denial of service, such as when an attacker...
Jenkins Inedo ProGet Plugin Plugin has Cleartext Transmission of Sensitive Information
Inedo ProGet Plugin Plugin stores a service password in its global Jenkins configuration. While the password is stored encrypted on disk, it was transmitted in plain text as part of the configuration form. This could result in exposure of the password through browser extensions, cross-site...
GHSA-H5HM-73HG-FRRM Jenkins Inedo ProGet Plugin globally and unconditionally disabled SSL/TLS certificate validation
A man in the middle vulnerability exists in Jenkins Inedo ProGet Plugin 0.8 and earlier in ProGetApi.java, ProGetConfig.java, ProGetConfiguration.java that allows attackers to impersonate any service that Jenkins connects to...
Unspecified Vulnerability in CloudBees Jenkins Inedo ProGet Plugin
CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . Inedo ProGet Plugin is used in one of the...
CVE-2019-10412
Jenkins Inedo ProGet Plugin 1.2 and earlier transmitted configured credentials in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure...
CVE-2019-10412
CVE-2019-10412 affects the CloudBees/Jenkins Inedo ProGet Plugin up to version 1.2, where credentials configured in the global Jenkins configuration form were transmitted in plain text, exposing sensitive data. The root cause involves the plugin storing a service password (encrypted on disk) but ...
PT-2019-11806 · Jenkins · Jenkins Inedo Proget Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Inedo ProGet Plugin versions 1.2 and earlier Description: The issue concerns the transmission of configured credentials in plain text as part of the global Jenkins configuration form, potentially leading to their exposure. Specificall...
Inedo ProGet Detection
Detection of Inedo ProGet. The script sends a connection request to the server and attempts to detect Inedo ProGet and to extract its version. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...
Inedo ProGet Cross-Site Scripting Vulnerability
Inedo ProGet is a general-purpose package manager from Inedo USA with package management, filtering and upgrading features. A cross-site scripting vulnerability exists in Inedo ProGet versions prior to 5.0 Beta5. A remote attacker can exploit the vulnerability to change advanced settings...
CVE-2017-15608
Inedo ProGet before 5.0 Beta5 has CSRF, allowing an attacker to change advanced settings...
CVE-2017-15608
Inedo ProGet before 5.0 Beta5 has CSRF, allowing an attacker to change advanced settings...
Cross site request forgery (csrf)
Inedo ProGet before 5.0 Beta5 has CSRF, allowing an attacker to change advanced settings...
CVE-2017-15608
Inedo ProGet is affected by a CSRF vulnerability in versions before 5.0 Beta5, enabling an attacker to change advanced settings. The issue is documented across multiple sources (NVD/NVD3/OpenVAS) with CVSS metrics: CVSSv3 base score 6.5 (I:H) and CVSSv2 base score 4.3 (I:P). Root cause is a cross...
CVE-2017-15608
Inedo ProGet before 5.0 Beta5 has CSRF, allowing an attacker to change advanced settings...
CVE-2018-1999034
A man in the middle vulnerability exists in Jenkins Inedo ProGet Plugin 0.8 and earlier in ProGetApi.java, ProGetConfig.java, ProGetConfiguration.java that allows attackers to impersonate any service that Jenkins connects to...
Design/Logic Flaw
A man in the middle vulnerability exists in Jenkins Inedo ProGet Plugin 0.8 and earlier in ProGetApi.java, ProGetConfig.java, ProGetConfiguration.java that allows attackers to impersonate any service that Jenkins connects to...
CVE-2018-1999034
CVE-2018-1999034 describes a man-in-the-middle vulnerability in Jenkins Inedo ProGet Plugin versions 0.8 and earlier, affecting ProGetApi.java, ProGetConfig.java, and ProGetConfiguration.java. The issue enables an attacker to impersonate any service that Jenkins connects to, due to insecure handl...
Inedo ProGet Design Vulnerability
Inedo ProGet is a general-purpose package manager from Inedo Japan with package management, filtering and upgrading features. A security vulnerability exists in Inedo ProGet versions prior to 4.7.14, which stems from the program's failure to properly handle malicious packet IDs.No information is...
Code injection
Inedo ProGet before 4.7.14 does not properly address dangerous package IDs during package addition, aka PG-1060...
CVE-2017-14944
Inedo ProGet is affected by CVE-2017-14944, with versions prior to 4.7.14 vulnerable due to improper handling of dangerous package IDs during package addition (PG-1060). The issue is scoped to Inedo ProGet before 4.7.14; exploitation details are not provided in the supplied documents. Remediation...