EUVD-2025-36655

Jenkins OpenShift Pipeline Plugin stores authorization tokens unencrypted in job config.xml files...

Jenkins OpenShift Pipeline Plugin stores authorization tokens unencrypted in job config.xml files

Jenkins OpenShift Pipeline Plugin 1.0.57 and earlier stores authorization tokens unencrypted in job config.xml files on the Jenkins controller as part of its configuration. These token can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system. As of...

PT-2025-44292

Name of the Vulnerable Software and Affected Versions Jenkins OpenShift Pipeline Plugin versions 1.0.57 and earlier Description The Jenkins OpenShift Pipeline Plugin stores authorization tokens unencrypted within config.xml files on the Jenkins controller. These files are accessible to users...

Jenkins OpenShift Pipeline Plugin 安全漏洞

Jenkins OpenShift Pipeline Plugin is an open source pipeline plugin for Jenkins. A security vulnerability exists in Jenkins OpenShift Pipeline Plugin 1.0.57 and earlier versions, which stems from an authorization token that is not encrypted and stored in the job config.xml file of the Jenkins...

EUVD-2023-2142

Malicious code in bioql PyPI...

EUVD-2023-1934

Malicious code in bioql PyPI...

EUVD-2022-4487

Malicious code in bioql PyPI...

EUVD-2022-6364

Malicious code in bioql PyPI...

EUVD-2022-1914

Malicious code in bioql PyPI...

EUVD-2022-4405

Malicious code in bioql PyPI...

EUVD-2022-6247

Malicious code in bioql PyPI...

CVE-2022-36906

A cross-site request forgery CSRF vulnerability in Jenkins OpenShift Deployer Plugin 1.2.0 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified username and password...

CVE-2022-36907

A missing permission check in Jenkins OpenShift Deployer Plugin 1.2.0 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified username and password...

CVE-2022-36908

A cross-site request forgery CSRF vulnerability in Jenkins OpenShift Deployer Plugin 1.2.0 and earlier allows attackers to check for the existence of an attacker-specified file path on the Jenkins controller file system and to upload a SSH key file from the Jenkins controller file system to an...

CVE-2020-2155

Jenkins OpenShift Deployer Plugin 1.2.0 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure...

CVE-2019-1003081

A missing permission check in Jenkins OpenShift Deployer Plugin in the DeployApplication.DeployApplicationDescriptordoCheckLogin form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server...

CVE-2019-1003080

A cross-site request forgery vulnerability in Jenkins OpenShift Deployer Plugin in the DeployApplication.DeployApplicationDescriptordoCheckLogin form validation method allows attackers to initiate a connection to an attacker-specified server...

The vulnerability of the Jenkins OpenShift Login plugin, related to improper session management, allows attackers to bypass security restrictions.

The vulnerability of the Jenkins OpenShift Login plugin is related to improper session management. Exploiting this vulnerability allows a malicious actor to bypass security restrictions from a remote location...

The vulnerability of the Controller File System Handler component in the Jenkins OpenShift Deployer Plugin allows a hacker to bypass established security restrictions and escalate their privileges.

The vulnerability of the Controller File System Handler component in the Jenkins OpenShift Deployer Plugin is related to authentication errors. Exploiting this vulnerability allows a malicious actor to bypass established security restrictions and escalate their privileges...

The vulnerability of the Jenkins OpenShift Deployer Plugin, related to authentication errors, allows attackers to circumvent existing security restrictions and increase their privileges.

The vulnerability of the Jenkins OpenShift Deployer Plugin is related to authentication errors. Exploiting this vulnerability can allow a malicious actor to bypass existing security restrictions and gain increased privileges...