91811 matches found
CVE-2019-10381
Jenkins Codefresh Integration Plugin 1.8 and earlier disables SSL/TLS and hostname verification globally for the Jenkins master JVM...
Design/Logic Flaw
Jenkins Codefresh Integration Plugin 1.8 and earlier disables SSL/TLS and hostname verification globally for the Jenkins master JVM...
Design/Logic Flaw
Jenkins VMware Lab Manager Slaves Plugin 0.2.8 and earlier disables SSL/TLS and hostname verification globally for the Jenkins master JVM...
CVE-2019-10382
Jenkins VMware Lab Manager Slaves Plugin 0.2.8 and earlier disables SSL/TLS and hostname verification globally for the Jenkins master JVM...
CVE-2019-10381
The CVE-2019-10381 entry concerns the Jenkins Codefresh Integration Plugin (versions 1.8 and earlier) which unconditionally disables SSL/TLS certificate validation and hostname verification for the entire Jenkins master JVM. This web-wide insecure behavior enables connections to proceed without p...
CVE-2019-10381
Jenkins Codefresh Integration Plugin 1.8 and earlier disables SSL/TLS and hostname verification globally for the Jenkins master JVM...
CVE-2019-10382
CVE-2019-10382 affects Jenkins VMware Lab Manager Slaves Plugin versions 0.2.8 and earlier. The vulnerability stems from the plugin disabling SSL/TLS and hostname verification globally for the Jenkins master JVM, creating a trust and MITM risk for TLS connections. Documented impacts indicate pote...
PT-2019-6387 · Jenkins · Jenkins Vmware Lab Manager Slaves Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins VMware Lab Manager Slaves Plugin versions 0.2.8 and earlier Description: The issue is related to the disabling of global SSL/TLS and hostname verification for the Jenkins master JVM, which could allow a remote attacker to perform a...
CVE-2016-10797
cPanel before 58.0.4 allows WHM "Purchase and Install an SSL Certificate" page visitors to list all server domains SEC-133...
Design/Logic Flaw
cPanel before 58.0.4 allows WHM "Purchase and Install an SSL Certificate" page visitors to list all server domains SEC-133...
CVE-2016-10786
cPanel before 60.0.25 allows members of the nobody group to read Apache HTTP Server SSL keys SEC-186...
Design/Logic Flaw
cPanel before 60.0.25 allows members of the nobody group to read Apache HTTP Server SSL keys SEC-186...
CVE-2016-10797
cPanel before 58.0.4 allows WHM "Purchase and Install an SSL Certificate" page visitors to list all server domains SEC-133...
CVE-2016-10797
The vulnerability CVE-2016-10797 affects cPanel/WHM prior to 58.0.4, where the WHM uy and Install an SSL Certificate page could disclose all server domains (information disclosure). Root cause is an exposure on the SSL certificate management page (SEC-133). Impact is information exposure of dom...
CVE-2016-10786
cPanel before 60.0.25 allows members of the nobody group to read Apache HTTP Server SSL keys SEC-186...
CVE-2016-10786
The CVE-2016-10786 entry affects cPanel before 60.0.25, where members of the nobody group can read Apache HTTP Server SSL private keys (information disclosure). Root cause is insufficient access control permitting read access to SSL keys by unauthorized system users. Red Hat and CNVD entries corr...
CVE-2017-18479
In cPanel before 62.0.4, WHM SSL certificate generation uses an unreserved e-mail address SEC-209...
Design/Logic Flaw
In cPanel before 62.0.4, WHM SSL certificate generation uses an unreserved e-mail address SEC-209...
CVE-2017-18479
CVE-2017-18479 affects cPanel prior to 62.0.4, where WHM SSL certificate generation uses an unreserved e-mail address (SEC-209). The issue is documented with CVSS metrics (CVSSv2 base 4.0, MEDIUM; CVSSv3 base 6.5, MEDIUM). Affected component: WHM/cPanel SSL certificate generation process; root ca...