CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

NVD•added 2024/03/06 5:15 p.m.•42 views

CVE-2024-28155

Jenkins AppSpider Plugin 1.0.16 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to obtain information about available scan config names, engine group names, and client names...

4.3CVSS5.5AI score0.0045EPSS

SaveExploits0References2

Cvelist•added 2024/03/06 5:1 p.m.•43 views

CVE-2024-28155

6.2AI score0.0045EPSS

SaveExploits0References2

CVE•added 2024/03/06 5:1 p.m.•88 views

CVE-2024-28155

CVE-2024-28155 affects Jenkins AppSpider Plugin versions 1.0.16 and earlier. The issue is a lack of permission checks across several HTTP endpoints, which allows attackers with Overall/Read permission to access information about available scan config names, engine group names, and client names. T...

4.3CVSS6.1AI score0.0045EPSS

SaveExploits0References2Affected Software1

Vulnrichment•added 2024/03/06 5:1 p.m.•19 views

CVE-2024-28155

6.3AI score0.0045EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by