org.jenkins-ci.main:jenkins-test-harness (1.532.1), org.jenkins-ci.main:jenkins-war (1.532.1) +25 more potentially affected by CVE-2019-1003049 via org.jenkins-ci.main:jenkins-core (1.532.1)

org.jenkins-ci.main:jenkins-core MAVEN version 1.532.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.532.1 - org.jenkins-ci.main:jenkins-war 1.532.1 -...

org.jenkins-ci.main:jenkins-test-harness (1.538), org.jenkins-ci.main:jenkins-war (1.538) +5 more potentially affected by CVE-2018-1999001 via org.jenkins-ci.main:jenkins-core (1.538)

org.jenkins-ci.main:jenkins-core MAVEN version 1.538 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.538 - org.jenkins-ci.main:jenkins-war 1.538 -...

org.jenkins-ci.main:jenkins-test-harness (1.538), org.jenkins-ci.main:jenkins-war (1.538) +5 more potentially affected by CVE-2018-1000861 via org.jenkins-ci.main:jenkins-core (1.538)

org.jenkins-ci.main:jenkins-core MAVEN version 1.538 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.538 - org.jenkins-ci.main:jenkins-war 1.538 -...

org.jenkins-ci.main:jenkins-test-harness (1.538), org.jenkins-ci.main:jenkins-war (1.538) +5 more potentially affected by CVE-2018-1999003 via org.jenkins-ci.main:jenkins-core (1.538)

org.jenkins-ci.main:jenkins-core MAVEN version 1.538 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.538 - org.jenkins-ci.main:jenkins-war 1.538 -...

org.jenkins-ci.main:jenkins-test-harness (1.532.1), org.jenkins-ci.main:jenkins-war (1.532.1) +25 more potentially affected by CVE-2018-1999003 via org.jenkins-ci.main:jenkins-core (1.532.1)

org.jenkins-ci.main:jenkins-core MAVEN version 1.532.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.532.1 - org.jenkins-ci.main:jenkins-war 1.532.1 -...

Cybercriminals Using New Malware Loader 'Bumblebee' in the Wild

Cybercriminal actors previously observed delivering BazaLoader and IcedID as part of their malware campaigns are said to have transitioned to a new loader called Bumblebee that's under active development. "Based on the timing of its appearance in the threat landscape and use by multiple...

New Threat Actor Exotic Lily acting as Initial Access Broker for Conti and Diavol ransomware group

THREAT LEVEL: Red. For a detailed advisory, download the pdf file here. Exotic Lily was first discovered exploiting a zero-day vulnerability in Microsoft MSHTML CVE-2021-40444, which piqued the curiosity of researchers as a potentially sophisticated threat actor. Following additional analysis, it...

org.jenkins-ci.main:jenkins-test-harness (1.538), org.jenkins-ci.main:jenkins-war (1.538) +5 more potentially affected by CVE-2022-20612 via org.jenkins-ci.main:jenkins-core (1.538)

org.jenkins-ci.main:jenkins-core MAVEN version 1.538 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.538 - org.jenkins-ci.main:jenkins-war 1.538 -...

Cloudbees Jenkins Bumblebee HP ALM Plugin Information Disclosure Vulnerability

Cloudbees Jenkins Hudson Labs is the United States CloudBees Cloudbees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version of the release/testing project and some timed tasks . Bumblebee HP ALM Plugin is us...

CVE-2021-21614

Jenkins Bumblebee HP ALM Plugin 4.1.5 and earlier stores credentials unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system...

CVE-2021-21614

Jenkins Bumblebee HP ALM Plugin 4.1.5 and earlier stores credentials unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system...

CVE-2021-21614

Jenkins Bumblebee HP ALM Plugin 4.1.5 and earlier stores credentials unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system...

Design/Logic Flaw

Jenkins Bumblebee HP ALM Plugin 4.1.5 and earlier stores credentials unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system...

CVE-2021-21614

Jenkins Bumblebee HP ALM Plugin 4.1.5 and earlier stores credentials unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system...

CVE-2021-21614

Jenkins Bumblebee HP ALM Plugin 4.1.5 and earlier stores credentials unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system...

CVE-2021-21614

Summary: CVE-2021-21614 affects the Jenkins Bumblebee HP ALM Plugin (version 4.1.5 and earlier). The underlying issue is that credentials are stored unencrypted in the plugin’s global configuration file on the Jenkins controller, which can be viewed by users with access to the controller filesyst...

CVE-2021-21614

Jenkins Bumblebee HP ALM Plugin 4.1.5 and earlier stores credentials unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system...

Credentials stored in plain text by bumblebee

bumblebee 4.1.5 and earlier stores credentials unencrypted in its global configuration file com.agiletestware.bumblebee.BumblebeeGlobalConfig.xml on the Jenkins controller as part of its configuration. These credentials can be viewed by users with access to the Jenkins controller file system...

CVE-2021-21614: Insufficiently Protected Credentials

Jenkins Bumblebee HP ALM Plugin 4.1.5 and earlier stores credentials unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system...

Cloudbees Jenkins information leakage vulnerability

Cloudbees Jenkins Hudson Labs is the United States CloudBees Cloudbees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version of the release/testing project and some timed tasks . Bumblebee HP ALM Plugin is us...