com.tikalk.hudson.plugins:notification (>=1.6, <=1.9), jenkins.plugins.elanceodesk:workplace-notifier (1.13) +6 more potentially affected by CVE-2020-2102 via org.jenkins-ci.main:jenkins-core (1.566)

org.jenkins-ci.main:jenkins-core MAVEN version 1.566 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.tikalk.hudson.plugins:notification =1.6, =1.11, =1.2, =1.4.1 - org.jenkins-ci.plugins:plugi...

Missing permission check in Jenkins PAM Authentication Plugin

A missing permission check in Jenkins PAM Authentication Plugin 1.5 and earlier, except 1.4.1 in PamSecurityRealm.DescriptorImpldoTest allowed users with Overall/Read permission to obtain limited information about the file /etc/shadow and the user Jenkins is running as...

PT-2022-3233

Name of the Vulnerable Software and Affected Versions AccountsService affected versions not specified Description The issue is related to insufficient access control in the AccountsService of the Ubuntu operating system. It may allow an attacker to cause a denial of service. The problem is that...

Salt Insecure configuration of PAM external authentication service

Salt before 2015.5.10 and 2015.8.x before 2015.8.8, when PAM external authentication is enabled, allows attackers to bypass the configured authentication service by passing an alternate service with a command sent to LocalClient...

GHSA-V2RP-9CPJ-PFW2 Salt Insecure configuration of PAM external authentication service

Salt before 2015.5.10 and 2015.8.x before 2015.8.8, when PAM external authentication is enabled, allows attackers to bypass the configured authentication service by passing an alternate service with a command sent to LocalClient...

com.tikalk.hudson.plugins:notification (>=1.6, <=1.9), jenkins.plugins.elanceodesk:workplace-notifier (1.13) +6 more potentially affected by CVE-2016-3722 via org.jenkins-ci.main:jenkins-core (1.566)

org.jenkins-ci.main:jenkins-core MAVEN version 1.566 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.tikalk.hudson.plugins:notification =1.6, =1.11, =1.2, =1.4.1 - org.jenkins-ci.plugins:plugi...

com.tikalk.hudson.plugins:notification (>=1.6, <=1.9), jenkins.plugins.elanceodesk:workplace-notifier (1.13) +6 more potentially affected by CVE-2018-1000410 via org.jenkins-ci.main:jenkins-core (1.566)

org.jenkins-ci.main:jenkins-core MAVEN version 1.566 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.tikalk.hudson.plugins:notification =1.6, =1.11, =1.2, =1.4.1 - org.jenkins-ci.plugins:plugi...

com.tikalk.hudson.plugins:notification (>=1.6, <=1.9), jenkins.plugins.elanceodesk:workplace-notifier (1.13) +6 more potentially affected by CVE-2017-1000392 via org.jenkins-ci.main:jenkins-core (1.566)

org.jenkins-ci.main:jenkins-core MAVEN version 1.566 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.tikalk.hudson.plugins:notification =1.6, =1.11, =1.2, =1.4.1 - org.jenkins-ci.plugins:plugi...

com.tikalk.hudson.plugins:notification (>=1.6, <=1.9), jenkins.plugins.elanceodesk:workplace-notifier (1.13) +6 more potentially affected by CVE-2018-1999047 via org.jenkins-ci.main:jenkins-core (1.566)

org.jenkins-ci.main:jenkins-core MAVEN version 1.566 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.tikalk.hudson.plugins:notification =1.6, =1.11, =1.2, =1.4.1 - org.jenkins-ci.plugins:plugi...

com.tikalk.hudson.plugins:notification (>=1.6, <=1.9), jenkins.plugins.elanceodesk:workplace-notifier (1.13) +6 more potentially affected by CVE-2018-1000864 via org.jenkins-ci.main:jenkins-core (1.566)

org.jenkins-ci.main:jenkins-core MAVEN version 1.566 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.tikalk.hudson.plugins:notification =1.6, =1.11, =1.2, =1.4.1 - org.jenkins-ci.plugins:plugi...

com.tikalk.hudson.plugins:notification (>=1.6, <=1.9), jenkins.plugins.elanceodesk:workplace-notifier (1.13) +6 more potentially affected by CVE-2017-1000353 via org.jenkins-ci.main:jenkins-core (1.566)

org.jenkins-ci.main:jenkins-core MAVEN version 1.566 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.tikalk.hudson.plugins:notification =1.6, =1.11, =1.2, =1.4.1 - org.jenkins-ci.plugins:plugi...

com.tikalk.hudson.plugins:notification (>=1.6, <=1.9), jenkins.plugins.elanceodesk:workplace-notifier (1.13) +6 more potentially affected by CVE-2018-1999002 via org.jenkins-ci.main:jenkins-core (1.566)

org.jenkins-ci.main:jenkins-core MAVEN version 1.566 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.tikalk.hudson.plugins:notification =1.6, =1.11, =1.2, =1.4.1 - org.jenkins-ci.plugins:plugi...

com.tikalk.hudson.plugins:notification (>=1.6, <=1.9), jenkins.plugins.elanceodesk:workplace-notifier (1.13) +6 more potentially affected by CVE-2018-1000193 via org.jenkins-ci.main:jenkins-core (1.566)

org.jenkins-ci.main:jenkins-core MAVEN version 1.566 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.tikalk.hudson.plugins:notification =1.6, =1.11, =1.2, =1.4.1 - org.jenkins-ci.plugins:plugi...

com.tikalk.hudson.plugins:notification (>=1.6, <=1.9), jenkins.plugins.elanceodesk:workplace-notifier (1.13) +6 more potentially affected by CVE-2019-1003049 via org.jenkins-ci.main:jenkins-core (1.566)

org.jenkins-ci.main:jenkins-core MAVEN version 1.566 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.tikalk.hudson.plugins:notification =1.6, =1.11, =1.2, =1.4.1 - org.jenkins-ci.plugins:plugi...

com.tikalk.hudson.plugins:notification (>=1.6, <=1.9), jenkins.plugins.elanceodesk:workplace-notifier (1.13) +6 more potentially affected by CVE-2018-1999003 via org.jenkins-ci.main:jenkins-core (1.566)

org.jenkins-ci.main:jenkins-core MAVEN version 1.566 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.tikalk.hudson.plugins:notification =1.6, =1.11, =1.2, =1.4.1 - org.jenkins-ci.plugins:plugi...

sssd bug fix and enhancement update

The System Security Services Daemon SSSD service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch NSS and the Pluggable Authentication Modules PAM interfaces toward the system, and a pluggable back-end system ...

pam bug fix and enhancement update

An update is available for pam. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 8.6...

pam bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

nss-pam-ldapd bug fix and enhancement update

An update is available for nss-pam-ldapd. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linu...

MySQL Server PAM Auth Bypass

The vulnerability of the MySQL Server database management system’s PAM Auth Plugin relates to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to protected information using the FIDO network protocol...