CloudBees Jenkins Zephyr Enterprise Test Management Plugin Information Disclosure Vulnerability

CloudBees Jenkins Hudson Labs is a set of Java-based development of continuous integration tools from the U.S. CloudBees. The product is mainly used to monitor the continuous software version release/testing project and some timed tasks . Zephyr Enterprise Test Management Plugin is used in one of...

IBM Engineering Test Management Cross-Site Scripting Vulnerability

IBM Engineering Test Management is a collaborative, Web-based quality management solution that provides end-to-end test planning and test asset management. A cross-site scripting vulnerability exists in IBM Engineering Test Management version 7.0.0. An attacker can exploit this vulnerability to...

IBM Engineering Test Management Information Disclosure Vulnerability

IBM Engineering Test Management is a collaborative, Web-based quality management solution that provides end-to-end test planning and test asset management. A security vulnerability exists in IBM Engineering Test Management version 7.0.0. An attacker could exploit this vulnerability by sending a...

Unspecified Vulnerability in CloudBees Jenkins Zephyr for JIRA Test Management Plugin

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing project and some timed tasks . Zephyr for JIRA Test Management Plugin is used...

CVE-2020-2215

A cross-site request forgery vulnerability in Jenkins Zephyr for JIRA Test Management Plugin 1.5 and earlier allows attackers to connect to an attacker-specified HTTP server using attacker-specified username and password...

CVE-2020-2216

A missing permission check in Jenkins Zephyr for JIRA Test Management Plugin 1.5 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified HTTP server using attacker-specified username and password...

Cross site request forgery (csrf)

A cross-site request forgery vulnerability in Jenkins Zephyr for JIRA Test Management Plugin 1.5 and earlier allows attackers to connect to an attacker-specified HTTP server using attacker-specified username and password...

Default credentials

A missing permission check in Jenkins Zephyr for JIRA Test Management Plugin 1.5 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified HTTP server using attacker-specified username and password...

CVE-2020-2216

Affected software: Jenkins Zephyr for JIRA Test Management Plugin, versions 1.5 and earlier.Root cause: Missing permission checks allow an attacker with Overall/Read to cause the plugin to connect to an attacker-controlled HTTP server using attacker-specified username/password.Impact: Authenticat...

CVE-2020-2215

A cross-site request forgery vulnerability in Jenkins Zephyr for JIRA Test Management Plugin 1.5 and earlier allows attackers to connect to an attacker-specified HTTP server using attacker-specified username and password...

CVE-2020-2215

The CVE-2020-2215 entry concerns a CSRF flaw in Jenkins Zephyr for JIRA Test Management Plugin (versions 1.5 and earlier). The underlying issue is a cross-site request forgery vulnerability that allows attackers to cause the application to connect to an attacker-controlled HTTP server using attac...

PT-2020-15430 · Jenkins · Jenkins Zephyr For Jira Test Management Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Zephyr for JIRA Test Management Plugin versions 1.5 and earlier Description: A cross-site request forgery issue allows attackers to connect to an attacker-specified HTTP server using an attacker-specified username and password...

XSS Platform is vulnerable to reloading

XSS Platform is an XSS penetration test management system. XSS Platform suffers from a reinstallation vulnerability that can be exploited by an attacker to cause a website to be reinstalled...

CloudBees Jenkins Zephyr for JIRA Test Management Plugin Information Disclosure Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing project and some timed tasks . Zephyr for JIRA Test Management Plugin is used...

CVE-2020-2154

Jenkins Zephyr for JIRA Test Management Plugin 1.5 and earlier stores its credentials in plain text in a global configuration file on the Jenkins master file system...

CVE-2020-2154

Jenkins Zephyr for JIRA Test Management Plugin 1.5 and earlier stores its credentials in plain text in a global configuration file on the Jenkins master file system...

Design/Logic Flaw

Jenkins Zephyr for JIRA Test Management Plugin 1.5 and earlier stores its credentials in plain text in a global configuration file on the Jenkins master file system...

Design/Logic Flaw

Jenkins Zephyr Enterprise Test Management Plugin 1.9.1 and earlier stores its Zephyr password in plain text on the Jenkins master file system...

CVE-2020-2154

Jenkins Zephyr for JIRA Test Management Plugin 1.5 and earlier stores its credentials in plain text in a global configuration file on the Jenkins master file system...

CVE-2020-2154

Affected software: Jenkins Zephyr for JIRA Test Management Plugin (versions 1.5 and earlier). Vulnerability: credentials stored in plain text in a global configuration file (com.thed.zephyr.jenkins.reporter.ZfjReporter.xml) on the Jenkins controller/master filesystem. Impact: potential disclosure...