6446 matches found
CVE-2018-1000401
CVE-2018-1000401 affects the Jenkins AWS CodePipeline Plugin up to version 0.36. The issue is an Insufficiently Protected Credentials vulnerability in AWSCodePipelineSCM.java, leading to possible credentials disclosure. Exploitation is described as being via local file access. The advisory notes ...
CVE-2018-1000402
The CVE concerns the Jenkins AWS CodeDeploy Plugin (versions
CVE-2018-1000403
Summary: Jenkins AWS CodeDeploy Plugin (Jenkins) versions ≤ 1.19 contain an Insufficiently Protected Credentials vulnerability in AWSCodeDeployPublisher.java, enabling partial credentials disclosure via local file access. The issue arises from credentials handling within the plugin, per CVE-2018-...
CVE-2018-1000404
Summary : Jenkins AWS CodeBuild Plugin
CVE-2018-1000404
Jenkins project Jenkins AWS CodeBuild Plugin version 0.26 and earlier contains a Insufficiently Protected Credentials vulnerability in AWSClientFactory.java, CodeBuilder.java that can result in Credentials Disclosure. This attack appear to be exploitable via local file access. This vulnerability...
CVE-2018-1000403
Jenkins project Jenkins AWS CodeDeploy Plugin version 1.19 and earlier contains a Insufficiently Protected Credentials vulnerability in AWSCodeDeployPublisher.java that can result in Credentials Disclosure. This attack appear to be exploitable via local file access. This vulnerability appears to...
CVE-2018-1000401
Jenkins project Jenkins AWS CodePipeline Plugin version 0.36 and earlier contains a Insufficiently Protected Credentials vulnerability in AWSCodePipelineSCM.java that can result in Credentials Disclosure. This attack appear to be exploitable via local file access. This vulnerability appears to ha...
CVE-2018-1000402
Jenkins project Jenkins AWS CodeDeploy Plugin version 1.19 and earlier contains a File and Directory Information Exposure vulnerability in AWSCodeDeployPublisher.java that can result in Disclosure of environment variables. This vulnerability appears to have been fixed in 1.20 and later...
Insufficiently Protected Credentials
The Jenkins AWS CodePipeline Plugin contains an Insufficiently Protected Credentials vulnerability...
Insufficiently Protected Credentials
The Jenkins AWS CodeBuild Plugin does not properly protect credentials in AWSClientFactory...
Insufficiently Protected Credentials
The Jenkins AWS CodeDeploy Plugin does not properly protect credentials in AWSCodeDeployPublisher...
CVE-2018-1000401: Insufficiently Protected Credentials
Jenkins project Jenkins AWS CodePipeline Plugin version 0.36 and earlier contains a Insufficiently Protected Credentials vulnerability in AWSCodePipelineSCM.java that can result in Credentials Disclosure. This attack appear to be exploitable via local file access. This vulnerability appears to ha...
CVE-2018-1000403: Insufficiently Protected Credentials
Jenkins project Jenkins AWS CodeDeploy Plugin version 1.19 and earlier contains a Insufficiently Protected Credentials vulnerability in AWSCodeDeployPublisher.java that can result in Credentials Disclosure. This attack appear to be exploitable via local file access. This vulnerability appears to...
CVE-2018-1000404: Insufficiently Protected Credentials
Jenkins project Jenkins AWS CodeBuild Plugin version 0.26 and earlier contains a Insufficiently Protected Credentials vulnerability in AWSClientFactory.java, CodeBuilder.java that can result in Credentials Disclosure. This attack appear to be exploitable via local file access. This vulnerability...
CVE-2018-1000402: Exposure of Sensitive Information to an Unauthorized Actor
Jenkins project Jenkins AWS CodeDeploy Plugin version 1.19 and earlier contains a File and Directory Information Exposure vulnerability in AWSCodeDeployPublisher.java that can result in Disclosure of environment variables. This vulnerability appears to have been fixed in 1.20 and later...
PT-2018-9395
Name of the Vulnerable Software and Affected Versions Jenkins AWS CodePipeline Plugin versions 0.36 and earlier Description The issue is related to insufficiently protected credentials in the AWSCodePipelineSCM.java file, which can lead to credentials disclosure. This can be exploited via local...
PT-2018-9396
Name of the Vulnerable Software and Affected Versions Jenkins AWS CodeDeploy Plugin versions 1.19 and earlier Description The issue is related to a File and Directory Information Exposure that can result in the disclosure of environment variables. This is due to a vulnerability in the...
PT-2018-9398
Name of the Vulnerable Software and Affected Versions Jenkins AWS CodeBuild Plugin versions 0.26 and earlier Description The issue is related to insufficiently protected credentials in the AWSClientFactory.java and CodeBuilder.java files, which can lead to credentials disclosure. This can be...
PT-2018-9397
Name of the Vulnerable Software and Affected Versions Jenkins AWS CodeDeploy Plugin versions 1.19 and earlier Description The issue is related to insufficiently protected credentials in the Jenkins AWS CodeDeploy Plugin, specifically in the AWSCodeDeployPublisher.java file, which can lead to...
