Lucene search
+L

8 matches found

RedhatCVE
RedhatCVE
•added 2026/01/07 9:49 a.m.•18 views

CVE-2022-27217

Jenkins Vmware vRealize CodeStream Plugin 1.2 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system...

6.5CVSS6.6AI score0.00949EPSS
SaveExploits0References1
osv_ghsa
osv_ghsa
•added 2022/03/16 12:00 a.m.•54 views

GHSA-9WVR-X83M-84V4 Passwords stored in plain text by Jenkins Vmware vRealize CodeStream Plugin

Jenkins Vmware vRealize CodeStream Plugin 1.2 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system...

4.3CVSS6.6AI score0.00949EPSS
SaveExploits0References4
NVD
NVD
•added 2022/03/15 5:15 p.m.•42 views

CVE-2022-27217

Jenkins Vmware vRealize CodeStream Plugin 1.2 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system...

6.5CVSS0.00949EPSS
SaveExploits0References2
Mend
Mend
•added 2022/03/15 4:46 p.m.•10 views

CVE-2022-27217

Jenkins Vmware vRealize CodeStream Plugin 1.2 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system...

7.1CVSS0.00949EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2022/03/15 4:46 p.m.•54 views

CVE-2022-27217

Jenkins Vmware vRealize CodeStream Plugin 1.2 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system...

7.2AI score0.00949EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/03/15 12:00 a.m.•25 views

Jenkins, Vmware, and VRealize CodeStream plugins have security vulnerabilities

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application.Jenkins Vmware vRealize CodeStream Plugin...

6.5CVSS5.7AI score0.00949EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2022/03/15 12:00 a.m.•21 views

PT-2022-18305 · Vmware +1 · Vmware Vrealize Codestream Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Vmware vRealize CodeStream Plugin versions 1.2 and earlier Description: The issue allows passwords to be stored unencrypted in job config.xml files on the Jenkins controller. Users with Extended Read permission or access to the Jenkin...

6.5CVSS6.3AI score0.00949EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/15 12:00 a.m.•8 views

CVE-2022-27217: Insufficiently Protected Credentials

Jenkins Vmware vRealize CodeStream Plugin 1.2 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system...

6.5CVSS6.7AI score0.00949EPSS
SaveExploits0References2
Rows per page
Query Builder