CVE-2019-10288

Affected software: Jenkins Jabber Server Plugin. Vulnerability: Credentials are stored unencrypted in the plugin’s global configuration file on the Jenkins master/controller (e.g., de.e_nexus.jabber.JabberBuilder.xml), which can be read by anyone with file-system access to the Jenkins controller....

CVE-2019-10288

Jenkins Jabber Server Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

PT-2019-11690 · Jenkins · Jenkins Jabber Server Plugin

Name of the Vulnerable Software and Affected Versions: Jenkins Jabber Server Plugin affected versions not specified Description: The issue concerns the storage of credentials in an unencrypted manner within the global configuration file on the Jenkins master or controller. Specifically, credentia...

CVE-2019-10288: Insufficiently Protected Credentials

Jenkins Jabber Server Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

The vulnerability of the Cisco Jabber Client Framework software, related to improper handling of permissions, allows a perpetrator to damage any files on the vulnerable device.

The vulnerability of the Cisco Jabber Client Framework software is related to incorrect handling of permissions. Exploiting this vulnerability can allow a perpetrator to damage any files on the vulnerable device...

The vulnerability of the Cisco Jabber Client Framework software arises from the lack of measures taken to protect the structure of the web page. This allows attackers to execute any JavaScript script they desire.

The vulnerability of the Cisco Jabber Client Framework exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute any arbitrary JavaScript script remotely...

Cisco Jabber Client Framework Cross-Site Scripting Vulnerability

Cisco Jabber Client Framework JCF is the United States Cisco Cisco company's set of unified communications client framework. The framework provides online status display, instant messaging, voice and other features. A cross-site scripting vulnerability exists in Cisco JCF, which stems from the...

Cross site scripting

A vulnerability in Cisco Jabber Client Framework JCF could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of an affected system. The vulnerability is due to insufficient validation of user-supplied input of an affected client. An attacker could...

CVE-2018-0483

A vulnerability in Cisco Jabber Client Framework JCF could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of an affected system. The vulnerability is due to insufficient validation of user-supplied input of an affected client. An attacker could...

CVE-2018-0483

A vulnerability in Cisco Jabber Client Framework JCF could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of an affected system. The vulnerability is due to insufficient validation of user-supplied input of an affected client. An attacker could...

CVE-2018-0483

Cisco Jabber Client Framework (JCF) XSS vulnerability (CVE-2018-0483) arises from insufficient validation of user-supplied input, enabling an authenticated, remote attacker to run arbitrary JavaScript in the recipient’s Jabber client and potentially access client data. Affected software is Cisco ...

CVE-2018-0483 Cisco Jabber Client Framework Instant Message Cross-Site Scripting Vulnerability

A vulnerability in Cisco Jabber Client Framework JCF could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of an affected system. The vulnerability is due to insufficient validation of user-supplied input of an affected client. An attacker could...

CVE-2018-0483 Cisco Jabber Client Framework Instant Message Cross-Site Scripting Vulnerability

A vulnerability in Cisco Jabber Client Framework JCF could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of an affected system. The vulnerability is due to insufficient validation of user-supplied input of an affected client. An attacker could...

CVE-2018-0449

A vulnerability in the Cisco Jabber Client Framework JCF software, installed as part of the Cisco Jabber for Mac client, could allow an authenticated, local attacker to corrupt arbitrary files on an affected device that has elevated privileges. The vulnerability exists due to insecure directory...

Hardcoded credentials

A vulnerability in the Cisco Jabber Client Framework JCF software, installed as part of the Cisco Jabber for Mac client, could allow an authenticated, local attacker to corrupt arbitrary files on an affected device that has elevated privileges. The vulnerability exists due to insecure directory...

CVE-2018-0449

A vulnerability in the Cisco Jabber Client Framework JCF software, installed as part of the Cisco Jabber for Mac client, could allow an authenticated, local attacker to corrupt arbitrary files on an affected device that has elevated privileges. The vulnerability exists due to insecure directory...

CVE-2018-0449

Cisco Jabber Client Framework (JCF) in the Cisco Jabber for Mac client is affected. The root cause is insecure directory permissions on a JCF-created directory, enabling an authenticated local attacker who can access that directory to create a hard link to an arbitrary location, potentially creat...

CVE-2018-0449 Cisco Jabber Client Framework Insecure Directory Permissions Vulnerability

A vulnerability in the Cisco Jabber Client Framework JCF software, installed as part of the Cisco Jabber for Mac client, could allow an authenticated, local attacker to corrupt arbitrary files on an affected device that has elevated privileges. The vulnerability exists due to insecure directory...

CVE-2018-0449 Cisco Jabber Client Framework Insecure Directory Permissions Vulnerability

A vulnerability in the Cisco Jabber Client Framework JCF software, installed as part of the Cisco Jabber for Mac client, could allow an authenticated, local attacker to corrupt arbitrary files on an affected device that has elevated privileges. The vulnerability exists due to insecure directory...

CVE-2018-0449: Incorrect Permission Assignment for Critical Resource

A vulnerability in the Cisco Jabber Client Framework JCF software, installed as part of the Cisco Jabber for Mac client, could allow an authenticated, local attacker to corrupt arbitrary files on an affected device that has elevated privileges. The vulnerability exists due to insecure directory...