175 matches found
com.antelink.reporter.jenkins.plugin:antepediareporter-ci-plugin (>=1.7, <=1.8), org.jenkins-ci.main:jenkins-test-harness (1.536) +3 more potentially affected by CVE-2019-1003050 via org.jenkins-ci.main:jenkins-core (1.536)
org.jenkins-ci.main:jenkins-core MAVEN version 1.536 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.antelink.reporter.jenkins.plugin:antepediareporter-ci-plugin =1.7, =1.1, =1.2 Source cves:...
com.antelink.reporter.jenkins.plugin:antepediareporter-ci-plugin (>=1.7, <=1.8), org.jenkins-ci.main:jenkins-test-harness (1.536) +3 more potentially affected by CVE-2018-1999001 via org.jenkins-ci.main:jenkins-core (1.536)
org.jenkins-ci.main:jenkins-core MAVEN version 1.536 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.antelink.reporter.jenkins.plugin:antepediareporter-ci-plugin =1.7, =1.1, =1.2 Source cves:...
com.antelink.reporter.jenkins.plugin:antepediareporter-ci-plugin (>=1.7, <=1.8), org.jenkins-ci.main:jenkins-test-harness (1.536) +3 more potentially affected by CVE-2018-1999003 via org.jenkins-ci.main:jenkins-core (1.536)
org.jenkins-ci.main:jenkins-core MAVEN version 1.536 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.antelink.reporter.jenkins.plugin:antepediareporter-ci-plugin =1.7, =1.1, =1.2 Source cves:...
columnpack:columnpack-plugin (1.0.3), com.amazonaws:aws-codepipeline (>=0.9, <=0.45) +698 more potentially affected by CVE-2013-0327 via org.jenkins-ci.main:jenkins-core (>=1.396, <=1.480.2)
org.jenkins-ci.main:jenkins-core MAVEN version =1.396, =0.9, =1.0, =1.0, =1.0-beta-1, =2.1, =1.0, =1.0, =0.1, =0.1, =0.5, =1.9.1 and more Source cves: CVE-2013-0327 Source advisory: OSV:GHSA-RQHG-CXFR-8XQW...
columnpack:columnpack-plugin (1.0.3), com.antelink.reporter.jenkins.plugin:antepediareporter-ci-plugin (>=1.0, <=1.6.3) +634 more potentially affected by CVE-2012-4439 via org.jenkins-ci.main:jenkins-core (>=1.396, <=1.466.1)
org.jenkins-ci.main:jenkins-core MAVEN version =1.396, =1.0, =1.0, =1.0-beta-1, =2.1, =1.0, =1.0, =0.1, =0.1, =0.5, =1.02.03, =1.0, =1.0.6 and more Source cves: CVE-2012-4439 Source advisory: OSV:GHSA-X97G-3GP9-CF2P...
com.antelink.reporter.jenkins.plugin:antepediareporter-ci-plugin (>=1.7, <=1.8), org.jenkins-ci.main:jenkins-test-harness (1.536) +3 more potentially affected by CVE-2022-20612 via org.jenkins-ci.main:jenkins-core (1.536)
org.jenkins-ci.main:jenkins-core MAVEN version 1.536 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.antelink.reporter.jenkins.plugin:antepediareporter-ci-plugin =1.7, =1.1, =1.2 Source cves:...
CVE-2020-2157
Jenkins Skytap Cloud CI Plugin 2.07 and earlier transmits configured credentials in plain text as part of job configuration forms, potentially resulting in their exposure...
CVE-2020-2157
Jenkins Skytap Cloud CI Plugin 2.07 and earlier transmits configured credentials in plain text as part of job configuration forms, potentially resulting in their exposure...
CVE-2020-2157
CVE-2020-2157 affects Jenkins Skytap Cloud CI Plugin, versions 2.07 and earlier. The underlying issue is that credentials are transmitted in plain text as part of job configuration forms, while stored encrypted on disk in config.xml. This can lead to exposure, e.g., to users with Extended Read pe...
CVE-2020-2157
Jenkins Skytap Cloud CI Plugin 2.07 and earlier transmits configured credentials in plain text as part of job configuration forms, potentially resulting in their exposure...
CVE-2020-2157: Cleartext Transmission of Sensitive Information
Jenkins Skytap Cloud CI Plugin 2.07 and earlier transmits configured credentials in plain text as part of job configuration forms, potentially resulting in their exposure...
PT-2020-15375 · Jenkins · Jenkins Skytap Cloud Ci Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Skytap Cloud CI Plugin versions 2.07 and earlier Description: The issue concerns the transmission of configured credentials in plain text as part of job configuration forms, potentially resulting in their exposure. The credentials are...
CVE-2012-4441
Cross-site Scripting XSS in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML in the CI game plugin...
CVE-2019-10450
Jenkins ElasticBox CI Plugin stores credentials unencrypted in the global config.xml configuration file on the Jenkins master where they can be viewed by users with access to the master file system...
Design/Logic Flaw
Jenkins ElasticBox CI Plugin stores credentials unencrypted in the global config.xml configuration file on the Jenkins master where they can be viewed by users with access to the master file system...
CVE-2019-10450
Jenkins ElasticBox CI Plugin stores credentials unencrypted in the global config.xml configuration file on the Jenkins master where they can be viewed by users with access to the master file system...
CVE-2019-10450
The CVE-2019-10450 entry concerns the Jenkins ElasticBox CI Plugin, which stores credentials unencrypted in the global config.xml on the Jenkins master. The underlying issue is the plaintext storage of sensitive information in the master configuration, enabling any user with master filesystem acc...
CVE-2019-10450
Jenkins ElasticBox CI Plugin stores credentials unencrypted in the global config.xml configuration file on the Jenkins master where they can be viewed by users with access to the master file system...
CVE-2019-10450: Cleartext Storage of Sensitive Information
Jenkins ElasticBox CI Plugin stores credentials unencrypted in the global config.xml configuration file on the Jenkins master where they can be viewed by users with access to the master file system...
PT-2019-11844 · Jenkins · Jenkins Elasticbox Ci Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins ElasticBox CI Plugin affected versions not specified Description: The issue concerns the storage of credentials in an unencrypted manner within the global config.xml configuration file on the Jenkins master. This allows users with...