Lucene search
+L

3 matches found

Snyk
Snyk
•added 2025/07/09 4:48 p.m.•5 views

Credential Exposure

Overview Affected versions of this package are vulnerable to Credential Exposure in the storage of the Xooa Deployment Token in the global configuration file on the Jenkins controller. An attacker can gain unauthorized access to sensitive credentials by obtaining access to the Jenkins controller...

6.8CVSS7AI score0.0022EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/01/26 12:00 a.m.•16 views

Jenkins Plugin GitHub Pull Request Coverage Status 安全漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. Jenkins Plugin GitHub Pul...

5.5CVSS5.8AI score0.00229EPSS
SaveExploits0References2
Jenkins Security Advisories
Jenkins Security Advisories
•added 2022/07/27 12:00 a.m.•17 views

Passwords stored in plain text by http_request

httprequest 1.15 and earlier stores HTTP Request passwords unencrypted in its global configuration file jenkins.plugins.httprequest.HttpRequest.xml on the Jenkins controller as part of its configuration when using deprecated Basic/Digest Authentication. These passwords can be viewed by users with...

6.5CVSS6.4AI score0.00839EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder