Lucene search
+L

8 matches found

Mend
Mend
•added 2021/01/13 3:55 p.m.•4 views

CVE-2021-21614

Jenkins Bumblebee HP ALM Plugin 4.1.5 and earlier stores credentials unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system...

6.8CVSS0.00335EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2021/01/13 3:55 p.m.•48 views

CVE-2021-21614

Jenkins Bumblebee HP ALM Plugin 4.1.5 and earlier stores credentials unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system...

6AI score0.00335EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
•added 2021/01/13 3:55 p.m.•86 views

CVE-2021-21614

Jenkins Bumblebee HP ALM Plugin 4.1.5 and earlier stores credentials unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system...

5.5CVSS2.6AI score0.00335EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/01/13 12:00 a.m.•6 views

CVE-2021-21614: Insufficiently Protected Credentials

Jenkins Bumblebee HP ALM Plugin 4.1.5 and earlier stores credentials unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system...

5.5CVSS5.8AI score0.00335EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/01/13 12:00 a.m.•22 views

Cloudbees Jenkins 信息泄露漏洞

Cloudbees Jenkins Hudson Labs is the United States CloudBees Cloudbees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version of the release/testing project and some timed tasks . Bumblebee HP ALM Plugin is us...

5.5CVSS6.1AI score0.00335EPSS
SaveExploits0References4
Mend
Mend
•added 2019/10/16 1:00 p.m.•5 views

CVE-2019-10444

Jenkins Bumblebee HP ALM Plugin 4.1.3 and earlier unconditionally disabled SSL/TLS and hostname verification for connections to HP ALM...

6.9CVSS0.00799EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/10/16 12:00 a.m.•5 views

CVE-2019-10444: Improper Certificate Validation

Jenkins Bumblebee HP ALM Plugin 4.1.3 and earlier unconditionally disabled SSL/TLS and hostname verification for connections to HP ALM...

6.5CVSS5.9AI score0.00799EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2019/10/16 12:00 a.m.•20 views

PT-2019-11838 · Jenkins +1 · Jenkins Bumblebee Hp Alm Plugin +2

Name of the Vulnerable Software and Affected Versions: Jenkins Bumblebee HP ALM Plugin versions 4.1.3 and earlier Description: The issue concerns the Jenkins Bumblebee HP ALM Plugin unconditionally disabling SSL/TLS and hostname verification for connections to HP ALM. This means that the plugin d...

6.5CVSS6.2AI score0.00799EPSS
SaveExploits0References4
Rows per page
Query Builder