9 matches found
EUVD-2008-1968
Malware in sbrugna...
GHSA-RFC8-WRRF-WP3W Jenkins Azure PublisherSettings Credentials Plugin stored credentials in plain text
Jenkins Azure PublisherSettings Credentials Plugin stored the service management certificate unencrypted in credentials.xml on the Jenkins controller. These credentials could be viewed by users with access to the Jenkins controller file system. Azure PublisherSettings Credentials Plugin has been...
CVE-2019-10303
Jenkins Azure PublisherSettings Credentials Plugin 1.2 and earlier stored credentials unencrypted in the credentials.xml file on the Jenkins master where they could be viewed by users with access to the master file system...
PT-2019-11705 · Jenkins · Jenkins Azure Publishersettings Credentials Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Azure PublisherSettings Credentials Plugin versions 1.2 and earlier Jenkins Azure PublisherSettings Credentials Plugin versions prior to 1.5 Description: The issue concerns the storage of credentials in an unencrypted manner within th...
Jenkins Credential Collector
This module can be used to extract saved Jenkins credentials, user tokens, SSH keys, and secrets. Interesting files will be stored in loot along with combined csv output. require 'nokogiri' require 'base64' require 'digest' require 'openssl' require 'sshkey' class MetasploitModule 'Jenkins...
Default credentials
muCommander before 0.8.2 stores credentials.xml with insecure permissions, which allows local users to obtain credentials...
CVE-2008-1970
muCommander before 0.8.2 stores credentials.xml with insecure permissions, which allows local users to obtain credentials...
CVE-2008-1970
muCommander before 0.8.2 stores credentials.xml with insecure permissions, allowing local users to obtain credentials. The issue is documented across multiple sources (NVD, CVE lists, and vendor references). Affected component: credentials.xml handling in muCommander; root cause: insecure file pe...
CVE-2008-1970
muCommander before 0.8.2 stores credentials.xml with insecure permissions, which allows local users to obtain credentials...