Lucene search
K

922 matches found

CNNVD
CNNVD
added 2021/05/11 12:0 a.m.4 views

Jenkins 信息泄露漏洞

CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . An authorization issue...

4.3CVSS5.9AI score0.00065EPSS
Exploits0References4
CNNVD
CNNVD
added 2021/05/11 12:0 a.m.3 views

Jenkins 代码问题漏洞

CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . CloudBees Jenkins Xcode...

7.1CVSS6AI score0.00202EPSS
Exploits0References4
CNVD
CNVD
added 2021/04/23 12:0 a.m.8 views

CloudBees Jenkins Config File Provider Plugin Privilege Checking Vulnerability (CNVD-2021-31659)

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . Config File Provider Plugin is used in one of...

4.3CVSS6.3AI score0.00118EPSS
Exploits0References1
CNVD
CNVD
added 2021/04/23 12:0 a.m.10 views

CloudBees Jenkins CloudBees CD Plugin Authorization Issue Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version of the release/test project and some timed tasks . LTS is a long-term support for...

4.3CVSS6.6AI score0.00162EPSS
Exploits0References1
CNVD
CNVD
added 2021/04/23 12:0 a.m.8 views

CloudBees Jenkins Config File Provider Plugin Privilege Check Vulnerability

CloudBees Jenkins formerly known as Hudson Labs is the United States CloudBees set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software release/testing projects and some of the timed execution of the task.Config File Provider Plugin is...

6.5CVSS6.2AI score0.00832EPSS
Exploits0References1
CNVD
CNVD
added 2021/04/23 12:0 a.m.5 views

CloudBees Jenkins Config File Provider Plugin Cross-Site Request Forgery Vulnerability (CNVD-2021-31660)

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . Config File Provider Plugin is used in one of...

5.8CVSS6.4AI score0.00125EPSS
Exploits0References1
NVD
NVD
added 2021/04/21 3:15 p.m.18 views

CVE-2021-21647

Jenkins CloudBees CD Plugin 1.1.21 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Item/Read permission to schedule builds of projects without having Item/Build permission...

4.3CVSS0.00162EPSS
Exploits0References2
OSV
OSV
added 2021/04/21 3:15 p.m.15 views

CVE-2021-21647

Jenkins CloudBees CD Plugin 1.1.21 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Item/Read permission to schedule builds of projects without having Item/Build permission...

4.3CVSS6.6AI score
Exploits0References2
Prion
Prion
added 2021/04/21 3:15 p.m.19 views

Code injection

Jenkins CloudBees CD Plugin 1.1.21 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Item/Read permission to schedule builds of projects without having Item/Build permission...

4CVSS4.4AI score0.00162EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2021/04/21 2:20 p.m.87 views

CVE-2021-21647

CVE-2021-21647 affects Jenkins CloudBees CD Plugin 1.1.21 and earlier. The root cause is a missing permission check on an HTTP endpoint, which allows attackers with Item/Read permission to schedule builds for projects without having Item/Build permission. Documented impact is that unauthorized us...

4.3CVSS4.8AI score0.00162EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2021/04/21 2:20 p.m.18 views

CVE-2021-21647

Jenkins CloudBees CD Plugin 1.1.21 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Item/Read permission to schedule builds of projects without having Item/Build permission...

5.2AI score0.00162EPSS
Exploits0References2
CNNVD
CNNVD
added 2021/04/21 12:0 a.m.3 views

Jenkins Config File Provider Plugin 安全漏洞

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . Config File Provider Plugin is used in one of...

4.3CVSS5.6AI score0.00118EPSS
Exploits0References16
CNNVD
CNNVD
added 2021/04/21 12:0 a.m.3 views

Jenkins 安全漏洞

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version of the release/test project and some timed tasks . LTS is a long-term support for...

4.3CVSS5.7AI score0.00162EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2021/04/21 12:0 a.m.3 views

PT-2021-14690 · Cloudbees +1 · Jenkins Cloudbees Cd Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins CloudBees CD Plugin versions 1.1.21 and earlier Description: The issue concerns a lack of permission check in an HTTP endpoint, allowing attackers with Item/Read permission to schedule builds of projects without having Item/Build...

4.3CVSS4.3AI score0.00162EPSS
Exploits0References8
CNVD
CNVD
added 2021/04/09 12:0 a.m.11 views

CloudBees Jenkins View Name Validation Bypass Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version of the release/test project and some timed tasks . LTS is a long-term support for...

4.3CVSS6.4AI score0.00703EPSS
Exploits0References1
CNVD
CNVD
added 2021/04/08 12:0 a.m.15 views

CloudBees Jenkins Data Validation Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version of the release/test project and some timed tasks . LTS is a long-term support for...

4.3CVSS6.5AI score0.00703EPSS
Exploits0References1
CNVD
CNVD
added 2021/04/08 12:0 a.m.9 views

CloudBees Micro Focus Application Automation Tools plugin cross-site scripting vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . A cross-site scripting...

6.1CVSS5.8AI score0.0024EPSS
Exploits0References1
CNVD
CNVD
added 2021/04/08 12:0 a.m.7 views

CloudBees Micro Focus Application Automation Tools Plugin Cross-Site Request Forgery Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . A cross-site request forgery...

6.5CVSS6.6AI score0.00117EPSS
Exploits0References1
CNVD
CNVD
added 2021/04/08 12:0 a.m.9 views

CloudBees Jenkins Promoted Builds plugin cross-site request forgery vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . A cross-site request forgery...

4.3CVSS6.5AI score0.00475EPSS
Exploits0References1
CNVD
CNVD
added 2021/04/08 12:0 a.m.8 views

CloudBees Micro Focus Application Automation Tools Plugin Improper Permission Checking Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . An improper privilege checkin...

6.5CVSS6.6AI score0.00139EPSS
Exploits0References1
Rows per page
Query Builder