61 matches found
PT-2023-19603 · Jenkins · Jenkins Testcomplete Support Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins TestComplete support Plugin versions 2.8.1 and earlier Description: The issue is related to the configuration of the XML parser, which does not prevent XML external entity XXE attacks. This allows for potential exploitation...
org.jenkins-ci.plugins:gallio (>=1.7, <=1.8), org.jenkins-ci.plugins:jsunit (1.6) +1 more potentially affected by CVE-2022-34181 via org.jenkins-ci.plugins:xunit (1.90)
org.jenkins-ci.plugins:xunit MAVEN version 1.90 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:xunit and may be impacted: - org.jenkins-ci.plugins:gallio =1.7, =1.0, =1.1 Source cves: CVE-2022-34181 Source advisory:...
org.jenkins-ci.main:jenkins-test-harness (1.598), org.jenkins-ci.main:jenkins-war (1.598) +3 more potentially affected by CVE-2021-21695 via org.jenkins-ci.main:jenkins-core (1.598)
org.jenkins-ci.main:jenkins-core MAVEN version 1.598 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.598 - org.jenkins-ci.main:jenkins-war 1.598 -...
org.jenkins-ci.main:jenkins-test-harness (1.598), org.jenkins-ci.main:jenkins-war (1.598) +3 more potentially affected by CVE-2020-2222 via org.jenkins-ci.main:jenkins-core (1.598)
org.jenkins-ci.main:jenkins-core MAVEN version 1.598 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.598 - org.jenkins-ci.main:jenkins-war 1.598 -...
org.jenkins-ci.main:jenkins-test-harness (1.598), org.jenkins-ci.main:jenkins-war (1.598) +3 more potentially affected by CVE-2020-2223 via org.jenkins-ci.main:jenkins-core (1.598)
org.jenkins-ci.main:jenkins-core MAVEN version 1.598 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.598 - org.jenkins-ci.main:jenkins-war 1.598 -...
GHSA-R32R-F6WR-CC3W Password stored in plain text by Jenkins TestComplete support Plugin
Jenkins TestComplete support Plugin prior to version 2.5.2 stores a password unencrypted in job config.xml files on the Jenkins master where it can be viewed by users with Extended Read permission, or access to the master file system. Version 2.5.2 contains a patch for this issue...
Password stored in plain text by Jenkins TestComplete support Plugin
Jenkins TestComplete support Plugin prior to version 2.5.2 stores a password unencrypted in job config.xml files on the Jenkins master where it can be viewed by users with Extended Read permission, or access to the master file system. Version 2.5.2 contains a patch for this issue...
org.jenkins-ci.main:jenkins-test-harness (1.598), org.jenkins-ci.main:jenkins-war (1.598) +3 more potentially affected by CVE-2019-10383 via org.jenkins-ci.main:jenkins-core (1.598)
org.jenkins-ci.main:jenkins-core MAVEN version 1.598 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.598 - org.jenkins-ci.main:jenkins-war 1.598 -...
org.jenkins-ci.main:jenkins-test-harness (1.598), org.jenkins-ci.main:jenkins-war (1.598) +3 more potentially affected by CVE-2018-1999047 via org.jenkins-ci.main:jenkins-core (1.598)
org.jenkins-ci.main:jenkins-core MAVEN version 1.598 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.598 - org.jenkins-ci.main:jenkins-war 1.598 -...
org.jenkins-ci.main:jenkins-test-harness (1.598), org.jenkins-ci.main:jenkins-war (1.598) +3 more potentially affected by CVE-2017-1000400 via org.jenkins-ci.main:jenkins-core (1.598)
org.jenkins-ci.main:jenkins-core MAVEN version 1.598 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.598 - org.jenkins-ci.main:jenkins-war 1.598 -...
org.jenkins-ci.main:jenkins-test-harness (1.598), org.jenkins-ci.main:jenkins-war (1.598) +3 more potentially affected by CVE-2022-20612 via org.jenkins-ci.main:jenkins-core (1.598)
org.jenkins-ci.main:jenkins-core MAVEN version 1.598 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.598 - org.jenkins-ci.main:jenkins-war 1.598 -...
Unspecified Vulnerability in CloudBees Jenkins TestComplete support Plugin
CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software release/testing projects and some timed tasks . TestComplete support Plugin is used in one of the un...
CVE-2020-2209
Jenkins TestComplete support Plugin 2.4.1 and earlier stores a password unencrypted in job config.xml files on the Jenkins master where it can be viewed by users with Extended Read permission, or access to the master file system...
CVE-2020-2209
Jenkins TestComplete support Plugin 2.4.1 and earlier stores a password unencrypted in job config.xml files on the Jenkins master where it can be viewed by users with Extended Read permission, or access to the master file system...
Design/Logic Flaw
Jenkins TestComplete support Plugin 2.4.1 and earlier stores a password unencrypted in job config.xml files on the Jenkins master where it can be viewed by users with Extended Read permission, or access to the master file system...
CVE-2020-2209
Jenkins TestComplete support Plugin 2.4.1 and earlier stores a password unencrypted in job config.xml files on the Jenkins master where it can be viewed by users with Extended Read permission, or access to the master file system...
CVE-2020-2209
CVE-2020-2209 affects CloudBees Jenkins TestComplete support Plugin versions 2.4.1 and earlier. The issue stems from storing passwords unencrypted in job config.xml on the Jenkins master, allowing access by users with Extended Read permission or direct master filesystem access. Remediation per mu...
CVE-2020-2209
Jenkins TestComplete support Plugin 2.4.1 and earlier stores a password unencrypted in job config.xml files on the Jenkins master where it can be viewed by users with Extended Read permission, or access to the master file system...
Password stored in plain text by TestComplete
TestComplete 2.4.1 and earlier stores a password unencrypted in job config.xml files as part of its configuration. This password can be viewed by users with Extended Read permission or access to the Jenkins controller file system. As of publication of this advisory, there is no fix...
PT-2020-15424 · Jenkins · Jenkins Testcomplete Support Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins TestComplete support Plugin versions 2.4.1 and earlier Description: The issue allows storage of a password unencrypted in job config.xml files on the Jenkins master. This can be viewed by users with Extended Read permission or access ...