Lucene search
+L

48 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/21 12:00 a.m.•4 views

CVE-2022-41252: Missing Authorization

Missing permission checks in Jenkins CONS3RT Plugin 1.0.0 and earlier allows users with Overall/Read permission to enumerate credentials ID of credentials stored in Jenkins...

4.3CVSS5.5AI score0.00654EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/09/21 12:00 a.m.•28 views

PT-2022-25770 · Jenkins · Jenkins Cons3Rt Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins CONS3RT Plugin versions 1.0.0 and earlier Description: The issue arises from missing permission checks in the Jenkins CONS3RT Plugin, allowing attackers with Overall/Read permission to connect to an attacker-specified HTTP server usin...

6.5CVSS6.3AI score0.00813EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2022/09/21 12:00 a.m.•18 views

Jenkins CONS3RT Plugin security vulnerabilities

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

4.3CVSS5.1AI score0.00654EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2022/09/21 12:00 a.m.•9 views

PT-2022-25768 · Jenkins · Jenkins Cons3Rt Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins CONS3RT Plugin versions 1.0.0 and earlier Description: The issue is related to missing permission checks in the Jenkins CONS3RT Plugin, which allows users with Overall/Read permission to enumerate credentials IDs of credentials stored...

4.3CVSS4.2AI score0.00654EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2022/09/21 12:00 a.m.•21 views

Jenkins CONS3RT Plugin security vulnerabilities

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

6.5CVSS6.5AI score0.00813EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2022/09/21 12:00 a.m.•10 views

PT-2022-25769 · Jenkins · Jenkins Cons3Rt Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins CONS3RT Plugin versions 1.0.0 and earlier Description: A cross-site request forgery CSRF vulnerability allows attackers to connect to an attacker-specified HTTP server using attacker-specified credentials IDs obtained through another...

8.8CVSS8.5AI score0.0057EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2022/09/21 12:00 a.m.•18 views

Jenkins CONS3RT Plugin Cross-Site Request Forgery Vulnerability

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A cross-site request...

8.8CVSS7.8AI score0.0057EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2022/09/21 12:00 a.m.•17 views

PT-2022-25771 · Jenkins · Jenkins Cons3Rt Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins CONS3RT Plugin versions 1.0.0 and earlier Description: The issue allows users with access to the Jenkins controller file system to view the Cons3rt API token, which is stored unencrypted in job config.xml files on the Jenkins...

6.5CVSS6.2AI score0.00813EPSS
SaveExploits0References7
Rows per page
Query Builder