Synopsys Coverity Panel Detection

Coverity® is a fast, accurate, and highly scalable static analysis SAST solution that helps development and security teams address security and quality defects early in the software development life cycle SDLC, track and manage risks across the application portfolio, and ensure compliance with...

CVE-2023-23847

A cross-site request forgery CSRF vulnerability in Synopsys Jenkins Coverity Plugin 3.0.2 and earlier allows attackers to connect to an attacker-specified HTTP server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins...

org.jenkins-ci.plugins:synopsys-coverity (>=3.0.4, <=3.0.5), org.jenkins-ci.plugins:synopsys-polaris (1.4.0) potentially affected by CVE-2024-47805 via org.jenkins-ci.plugins:credentials (1139.veb_9579fca_33b)

org.jenkins-ci.plugins:credentials MAVEN version 1139.veb9579fca33b is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - org.jenkins-ci.plugins:synopsys-coverity =3.0.4, =3.0.5 -...

org.jenkins-ci.plugins:gradle (2.12.0.1), org.jenkins-ci.plugins:synopsys-coverity (>=3.0.4, <=3.0.5) +1 more potentially affected by CVE-2024-39459 via org.jenkins-ci.plugins:plain-credentials (1.8)

org.jenkins-ci.plugins:plain-credentials MAVEN version 1.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:plain-credentials and may be impacted: - org.jenkins-ci.plugins:gradle 2.12.0.1 - org.jenkins-ci.plugins:synopsys-coverity...

Missing permission checks in synopsys-coverity allow enumerating credentials IDs

synopsys-coverity 3.0.2 and earlier does not perform permission checks in several HTTP endpoints. This allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins. Those can be used as part of an attack to capture the credentials using another...

CSRF vulnerability and missing permission checks in synopsys-coverity allow capturing credentials

synopsys-coverity 3.0.2 and earlier does not perform permission checks in several HTTP endpoints. This allows attackers with Overall/Read permission to connect to an attacker-specified HTTP server using attacker-specified credentials IDs obtained through another method, capturing credentials stor...

Jenkins Plugin Synopsys Coverity Security Vulnerabilities

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

Jenkins Plugin Synopsys Coverity Security Vulnerabilities

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

Jenkins Plugin Synopsys Coverity Cross-Site Request Forgery Vulnerability

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

Jenkins Enterprise and Operations Center 2.346.x < 2.346.40.0.9 Multiple Vulnerabilities (CloudBees Security Advisory 2023-02-15)

The version of Jenkins Enterprise or Jenkins Operations Center running on the remote web server is 2.346.x prior to 2.346.40.0.9. It is, therefore, affected by multiple vulnerabilities including the following: - CSRF vulnerability and missing permission checks in Synopsys Coverity Plugin allow...