EUVD-2022-5024

Malicious code in bioql PyPI...

CloudBees Jenkins Audit to Database Plugin Trust Management Issue Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . Audit to Database Plugin is used in which a...

CloudBees Jenkins Audit to Database plugin cross-site request forgery vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . Audit to Database Plugin is used in which a...

CVE-2019-1003076

Summary (CVE-2019-1003076) : A cross-site request forgery vulnerability in the Jenkins Audit to Database Plugin (DbAuditPublisherDescriptorImpl#doTestJdbcConnection) allows an attacker to initiate a connection to a server specified by the attacker. The issue is documented across multiple sources ...

PT-2019-11365 · Jenkins · Jenkins Audit To Database Plugin

Name of the Vulnerable Software and Affected Versions: Jenkins Audit to Database Plugin affected versions not specified Description: The issue concerns the storage of credentials in an unencrypted manner within the global configuration file. Specifically, database credentials are stored unencrypt...