Lucene search
+L

731 matches found

CNVD
CNVD
•added 2020/03/19 12:00 a.m.•16 views

Unspecified Vulnerability in CloudBees Jenkins Logstash Plugin

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . Logstash Plugin is used in one of the data...

5.3CVSS6.8AI score0.00614EPSS
SaveExploits0References1
osv-cve
osv-cve
•added 2020/03/09 4:15 p.m.•25 views

CVE-2020-2143

Jenkins Logstash Plugin 2.3.1 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure...

5.3CVSS6.8AI score
SaveExploits0References2
NVD
NVD
•added 2020/03/09 4:15 p.m.•27 views

CVE-2020-2143

Jenkins Logstash Plugin 2.3.1 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure...

5.3CVSS5.3AI score0.00614EPSS
SaveExploits0References2
Prion
Prion
•added 2020/03/09 4:15 p.m.•21 views

Design/Logic Flaw

Jenkins Logstash Plugin 2.3.1 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure...

5CVSS5.3AI score0.00614EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2020/03/09 3:00 p.m.•92 views

CVE-2020-2143

Summary of CVE-2020-2143 (Jenkins Logstash Plugin): Jenkins Logstash Plugin versions up to 2.3.1 transmit credentials in plain text via the global Jenkins configuration form, creating exposure risk (e.g., through browser extensions or XSS). The issue stems from how credentials are handled in the ...

5.3CVSS5.3AI score0.00614EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2020/03/09 3:00 p.m.•33 views

CVE-2020-2143

Jenkins Logstash Plugin 2.3.1 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure...

5.3AI score0.00614EPSS
SaveExploits0References2
Mend
Mend
•added 2020/03/09 3:00 p.m.•7 views

CVE-2020-2143

Jenkins Logstash Plugin 2.3.1 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure...

6.9CVSS0.00614EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/03/09 12:00 a.m.•10 views

CVE-2020-2143: Cleartext Transmission of Sensitive Information

Jenkins Logstash Plugin 2.3.1 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure...

5.3CVSS5.6AI score0.00614EPSS
SaveExploits0References2
Jenkins Security Advisories
Jenkins Security Advisories
•added 2020/03/09 12:00 a.m.•21 views

Credentials transmitted in plain text by logstash

logstash stores credentials in its global configuration file jenkins.plugins.logstash.LogstashConfiguration.xml on the Jenkins controller as part of its configuration. While the credentials are stored encrypted on disk, they are transmitted in plain text as part of the configuration form by...

5.3CVSS5.4AI score0.00614EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2020/03/09 12:00 a.m.•18 views

PT-2020-15354 · Jenkins · Jenkins Logstash Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Logstash Plugin versions 2.3.1 and earlier Description: The issue concerns the transmission of configured credentials in plain text as part of the global Jenkins configuration form. This potentially results in their exposure through...

5.3CVSS5AI score0.00614EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
•added 2020/01/18 12:00 a.m.•116 views

Photon OS 3.0: Logstash PHSA-2019-3.0-0046

An update of the logstash package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-3.0-0046. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid133062;...

7.5CVSS6.5AI score0.0208EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
•added 2020/01/17 10:11 p.m.•33 views

Security Bulletin: IBM API Connect is impacted by a vulnerability in Elastic Logstash (CVE-2019-7612)

Summary IBM API Connect has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2019-7612 DESCRIPTION: A sensitive data disclosure flaw was found in the way Logstash versions before 5.6.15 and 6.6.1 logs malformed URLs. If a malformed URL is specified as part of the Logstash...

9.8CVSS1.4AI score0.02407EPSS
SaveExploits0Affected Software1
Tenable Nessus
Tenable Nessus
•added 2020/01/16 12:00 a.m.•42 views

Photon OS 2.0: Logstash PHSA-2019-2.0-0194

An update of the logstash package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-2.0-0194. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

7.5CVSS6.5AI score0.0208EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2020/01/08 12:00 a.m.•68 views

Photon OS 1.0: Logstash PHSA-2019-1.0-0260

An update of the logstash package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-1.0-0260. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

7.5CVSS6.5AI score0.0208EPSS
SaveExploits0References2
Photon
Photon
•added 2019/12/17 12:00 a.m.•58 views

Important Photon OS Security Update - PHSA-2019-3.0-0046

Updates of 'linux-aws', 'linux', 'linux-secure', 'linux-esx', 'logstash' packages of Photon OS have been released...

7.8CVSS6.5AI score0.06623EPSS
SaveExploits1
Photon
Photon
•added 2019/12/16 12:00 a.m.•61 views

Important Photon OS Security Update - PHSA-2019-0046

Updates of 'logstash', 'linux-esx', 'linux', 'linux-secure', 'linux-aws' packages of Photon OS have been released...

7.8CVSS6.5AI score0.06623EPSS
SaveExploits1
Photon
Photon
•added 2019/12/14 12:00 a.m.•30 views

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2019-2.0-0194

An update of 'logstash' packages of Photon OS has been released...

5CVSS0.9AI score0.0208EPSS
SaveExploits0
Photon
Photon
•added 2019/12/14 12:00 a.m.•56 views

Important Photon OS Security Update - PHSA-2019-0194

Updates of 'linux-aws', 'linux-secure', 'logstash', 'linux-esx', 'linux' packages of Photon OS have been released...

7.8CVSS6.6AI score0.00738EPSS
SaveExploits2
Photon
Photon
•added 2019/12/10 12:00 a.m.•39 views

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2019-1.0-0260

An update of 'logstash', 'gc' packages of Photon OS has been released...

7.5CVSS0.9AI score0.0414EPSS
SaveExploits0
Photon
Photon
•added 2019/12/10 12:00 a.m.•40 views

Critical Photon OS Security Update - PHSA-2019-0260

Updates of 'gc', 'logstash' packages of Photon OS have been released...

1.6AI score
SaveExploits0
Rows per page
Query Builder