15 matches found
Jenkins plugins Multiple Vulnerabilities (2026-08-05)
According to their self-reported version numbers, the version of Jenkins plugins running on the remote web server are affected by multiple vulnerabilities: - In Remoting 3384.v60d89463d9e0 and earlier, except 3355.3357.v931d3c992987, included in Jenkins 2... CVE-2026-70426 - Jenkins 2.575 and...
CVE-2026-70447: Missing Authorization
Missing permission checks in Jenkins AWS CodeBuild Plugin 0.59 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...
PT-2026-68282
Name of the Vulnerable Software and Affected Versions Jenkins AWS CodeBuild Plugin versions prior to 0.60 Description Missing permission checks allow users with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins. Recommendations Update Jenkins AWS CodeBuild Plug...
@104corp/cdk-aws-codedeploy-on-premises (>=1.0.0, <=1.0.2), @aws-amplify/amplify-category-api (>=1.1.0-GqlExtensibility.1, <=4.2.0-rdsv2preview.0) +97 more potentially affected by unknown CVE via @aws-cdk/aws-codebuild (>=1.75.0, <=1.203.0)
@aws-cdk/aws-codebuild NPM version =1.75.0, =1.0.0, =1.1.0-GqlExtensibility.1, =1.2.0-geo.0, =4.13.3-beta.0, =7.6.26-npm-pkg-cli.0, =7.6.27-alpha.5030, =1.1.0-ext1.0, =1.75.0, =1.75.0, =1.75.0, =1.75.0, =1.75.0, =1.75.0, =1.75.0, =1.75.0, =1.203.0 and more Source cves: unknown CVE Source advisory...
PT-2026-67471
Summary The AWS Cloud Development Kit AWS CDK is an open-source software development framework for defining cloud infrastructure in code and provisioning it through AWS CloudFormation. We identified an issue in which explicitly setting encrypted: true on the S3LoggingOptions property of an AWS...
CVE-2024-37293
The AWS Deployment Framework ADF is a framework to manage and deploy resources across multiple AWS accounts and regions within an AWS Organization. ADF allows for staged, parallel, multi-account, cross-region deployments of applications or resources via the structure defined in AWS Organizations...
CVE-2024-37293 aws-deployment-framework's potential risk can lead to privilege escalation
The AWS Deployment Framework ADF is a framework to manage and deploy resources across multiple AWS accounts and regions within an AWS Organization. ADF allows for staged, parallel, multi-account, cross-region deployments of applications or resources via the structure defined in AWS Organizations...
GHSA-MWG7-69HF-VQH3 Insufficiently Protected Credentials in Jenkins AWS CodeBuild Plugin
Jenkins project Jenkins AWS CodeBuild Plugin version 0.26 and earlier contains a Insufficiently Protected Credentials vulnerability in AWSClientFactory.java, CodeBuilder.java that can result in Credentials Disclosure. This attack appear to be exploitable via local file access. This vulnerability...
SyntheticSun - A Defense-In-Depth Security Automation And Monitoring Framework Which Utilizes Threat Intelligence, Machine Learning, Managed AWS Security Services And, Serverless Technologies To Continuously Prevent, Detect And Respond To Threats
SyntheticSun is a defense-in-depth security automation and monitoring framework which utilizes threat intelligence, machine learning, managed AWS security services and, serverless technologies to continuously prevent, detect and respond to threats. You sleep in fragmented glass With reflections o...
CVE-2018-1000404
Jenkins project Jenkins AWS CodeBuild Plugin version 0.26 and earlier contains a Insufficiently Protected Credentials vulnerability in AWSClientFactory.java, CodeBuilder.java that can result in Credentials Disclosure. This attack appear to be exploitable via local file access. This vulnerability...
CVE-2018-1000404
Jenkins project Jenkins AWS CodeBuild Plugin version 0.26 and earlier contains a Insufficiently Protected Credentials vulnerability in AWSClientFactory.java, CodeBuilder.java that can result in Credentials Disclosure. This attack appear to be exploitable via local file access. This vulnerability...
CVE-2018-1000404
Jenkins project Jenkins AWS CodeBuild Plugin version 0.26 and earlier contains a Insufficiently Protected Credentials vulnerability in AWSClientFactory.java, CodeBuilder.java that can result in Credentials Disclosure. This attack appear to be exploitable via local file access. This vulnerability...
CVE-2018-1000404: Insufficiently Protected Credentials
Jenkins project Jenkins AWS CodeBuild Plugin version 0.26 and earlier contains a Insufficiently Protected Credentials vulnerability in AWSClientFactory.java, CodeBuilder.java that can result in Credentials Disclosure. This attack appear to be exploitable via local file access. This vulnerability...
PT-2018-9398
Name of the Vulnerable Software and Affected Versions Jenkins AWS CodeBuild Plugin versions 0.26 and earlier Description The issue is related to insufficiently protected credentials in the AWSClientFactory.java and CodeBuilder.java files, which can lead to credentials disclosure. This can be...
