org.jenkins-ci.plugins:mesos (>=0.8.0, <=0.10.1) potentially affected by CVE-2017-9790 via org.apache.mesos:mesos (0.22.1)

org.apache.mesos:mesos MAVEN version 0.22.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - org.jenkins-ci.plugins:mesos =0.8.0, =0.10.1 Source cves: CVE-2017-9790 Source advisory: OSV:GHSA-VPCV-78CP-WHR3...

org.jenkins-ci.plugins:mesos (>=0.11.0, <=0.13.1) potentially affected by CVE-2017-9790 via org.apache.mesos:mesos (0.27.0)

org.apache.mesos:mesos MAVEN version 0.27.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - org.jenkins-ci.plugins:mesos =0.11.0, =0.13.1 Source cves: CVE-2017-9790 Source advisory: OSV:GHSA-VPCV-78CP-WHR3...

org.jenkins-ci.plugins:mesos (>=0.8.0, <=0.10.1) potentially affected by CVE-2017-7687 via org.apache.mesos:mesos (0.22.1)

org.apache.mesos:mesos MAVEN version 0.22.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - org.jenkins-ci.plugins:mesos =0.8.0, =0.10.1 Source cves: CVE-2017-7687 Source advisory: OSV:GHSA-X869-784M-JMJ2...

org.jenkins-ci.plugins:mesos (>=0.11.0, <=0.13.1) potentially affected by CVE-2017-7687 via org.apache.mesos:mesos (0.27.0)

org.apache.mesos:mesos MAVEN version 0.27.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - org.jenkins-ci.plugins:mesos =0.11.0, =0.13.1 Source cves: CVE-2017-7687 Source advisory: OSV:GHSA-X869-784M-JMJ2...

org.jenkins-ci.plugins:mesos (0.4.0) potentially affected by CVE-2017-7687 via org.apache.mesos:mesos (0.19.0)

org.apache.mesos:mesos MAVEN version 0.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - org.jenkins-ci.plugins:mesos 0.4.0 Source cves: CVE-2017-7687 Source advisory: OSV:GHSA-X869-784M-JMJ2...

org.jenkins-ci.plugins:mesos (0.5.0) potentially affected by CVE-2017-7687 via org.apache.mesos:mesos (0.20.0)

org.apache.mesos:mesos MAVEN version 0.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - org.jenkins-ci.plugins:mesos 0.5.0 Source cves: CVE-2017-7687 Source advisory: OSV:GHSA-X869-784M-JMJ2...

org.jenkins-ci.plugins:mesos (>=0.11.0, <=0.13.1) potentially affected by CVE-2019-0204 via org.apache.mesos:mesos (0.27.0)

org.apache.mesos:mesos MAVEN version 0.27.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - org.jenkins-ci.plugins:mesos =0.11.0, =0.13.1 Source cves: CVE-2019-0204 Source advisory: OSV:GHSA-32W9-2QPC-5F9V...

org.jenkins-ci.plugins:mesos (0.4.0) potentially affected by CVE-2019-0204 via org.apache.mesos:mesos (0.19.0)

org.apache.mesos:mesos MAVEN version 0.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - org.jenkins-ci.plugins:mesos 0.4.0 Source cves: CVE-2019-0204 Source advisory: OSV:GHSA-32W9-2QPC-5F9V...

org.jenkins-ci.plugins:mesos (>=0.11.0, <=0.13.1) potentially affected by CVE-2018-11793 via org.apache.mesos:mesos (0.27.0)

org.apache.mesos:mesos MAVEN version 0.27.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - org.jenkins-ci.plugins:mesos =0.11.0, =0.13.1 Source cves: CVE-2018-11793 Source advisory: OSV:GHSA-P2XQ-VCM7-XJJ6...

org.jenkins-ci.plugins:mesos (0.4.0) potentially affected by CVE-2018-11793 via org.apache.mesos:mesos (0.19.0)

org.apache.mesos:mesos MAVEN version 0.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - org.jenkins-ci.plugins:mesos 0.4.0 Source cves: CVE-2018-11793 Source advisory: OSV:GHSA-P2XQ-VCM7-XJJ6...

org.jenkins-ci.plugins:mesos (>=0.8.0, <=0.10.1) potentially affected by CVE-2018-11793 via org.apache.mesos:mesos (0.22.1)

org.apache.mesos:mesos MAVEN version 0.22.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - org.jenkins-ci.plugins:mesos =0.8.0, =0.10.1 Source cves: CVE-2018-11793 Source advisory: OSV:GHSA-P2XQ-VCM7-XJJ6...

org.jenkins-ci.plugins:mesos (0.5.0) potentially affected by CVE-2018-11793 via org.apache.mesos:mesos (0.20.0)

org.apache.mesos:mesos MAVEN version 0.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - org.jenkins-ci.plugins:mesos 0.5.0 Source cves: CVE-2018-11793 Source advisory: OSV:GHSA-P2XQ-VCM7-XJJ6...

CVE-2018-1000421

CVE-2018-1000421 affects Jenkins Mesos Plugin up to version 0.17.1. The root cause is an improper authorization in MesosCloud.java that allows attackers with Overall/Read access to initiate a test connection to a attacker-specified Mesos server using attacker-specified credentials IDs, enabling e...

CVE-2018-1000421

An improper authorization vulnerability exists in Jenkins Mesos Plugin 0.17.1 and earlier in MesosCloud.java that allows attackers with Overall/Read access to initiate a test connection to an attacker-specified Mesos server with attacker-specified credentials IDs obtained through another method,...

CVE-2018-1000420

An improper authorization vulnerability exists in Jenkins Mesos Plugin 0.17.1 and earlier in MesosCloud.java that allows attackers with Overall/Read access to obtain credentials IDs for credentials stored in Jenkins...

PT-2019-8732

Name of the Vulnerable Software and Affected Versions Jenkins Mesos Plugin versions 0.17.1 and earlier Description An improper authorization issue exists that allows attackers with Overall/Read access to initiate a test connection to an attacker-specified Mesos server with attacker-specified...

PT-2019-8731

Name of the Vulnerable Software and Affected Versions Jenkins Mesos Plugin versions 0.17.1 and earlier Description An improper authorization issue exists that allows attackers with Overall/Read access to obtain credentials IDs for credentials stored in Jenkins. Recommendations For Jenkins Mesos...

CVE-2018-1000421: Server-Side Request Forgery (SSRF)

An improper authorization vulnerability exists in Jenkins Mesos Plugin 0.17.1 and earlier in MesosCloud.java that allows attackers with Overall/Read access to initiate a test connection to an attacker-specified Mesos server with attacker-specified credentials IDs obtained through another method,...

CVE-2018-1000420: Incorrect Authorization

An improper authorization vulnerability exists in Jenkins Mesos Plugin 0.17.1 and earlier in MesosCloud.java that allows attackers with Overall/Read access to obtain credentials IDs for credentials stored in Jenkins...

org.jenkins-ci.plugins:mesos (0.5.0) potentially affected by CVE-2018-8023 via org.apache.mesos:mesos (0.20.0)

org.apache.mesos:mesos MAVEN version 0.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - org.jenkins-ci.plugins:mesos 0.5.0 Source cves: CVE-2018-8023 Source advisory: OSV:GHSA-C8CC-P3J7-4C7F...