46 matches found
PT-2023-19592 · Macstadium +1 · Jenkins Orka By Macstadium Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Orka by MacStadium Plugin versions 1.31 and earlier Description: A cross-site request forgery CSRF issue allows attackers to connect to an attacker-specified HTTP server using attacker-specified credentials IDs, potentially capturing...
PT-2023-19593 · Macstadium +1 · Jenkins Orka By Macstadium Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Orka by MacStadium Plugin versions 1.31 and earlier Description: The issue is related to missing permission checks, allowing attackers with Overall/Read permission to connect to an attacker-specified HTTP server using attacker-specifi...
CVE-2023-24431
CVE-2023-24431 affects the Jenkins Orka by MacStadium Plugin (versions 1.31 and earlier). The issue is a missing permission check in several HTTP endpoints, allowing attackers with Overall/Read permission to enumerate credentials IDs stored in Jenkins. This can facilitate credential exposure and ...
CVE-2023-24432
A cross-site request forgery CSRF vulnerability in Jenkins Orka by MacStadium Plugin 1.31 and earlier allows attackers to connect to an attacker-specified HTTP server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins...
CVE-2023-24433
The CVE-2023-24433 entry concerns the Orka by MacStadium Jenkins plugin (versions 1.31 and earlier). The root cause is missing permission checks across several HTTP endpoints, enabling attackers with Overall/Read permission to (a) enumerate credentials IDs stored in Jenkins and (b) connect to an ...