PT-2026-72482

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the LoongArch architecture, the kvm vcpu ioctl interrupt function can be called from userspace without proper validation of the interrupt request irq. This lack of validity checking...

CVE-2024-47805

Jenkins Credentials Plugin 1380.va435002fa924 and earlier, except 1371.1373.v4ebfab7161e9, does not redact encrypted values of credentials using the SecretBytes type when accessing item config.xml via REST API or CLI...

Jenkins plugins Multiple Vulnerabilities (2024-10-02)

According to their self-reported version numbers, the version of Jenkins plugins running on the remote web server are affected by multiple vulnerabilities: - Jenkins Credentials Plugin 1380.va435002fa924 and earlier, except 1371.1373.v4ebfab7161e9, does not redact encrypted values of credentials...

org.jenkins-ci.plugins:git-client (>=1.1.2, <=1.4.5), org.jenkins-ci.plugins:job-dsl (>=1.18, <=1.19) +4 more potentially affected by CVE-2024-47805 via org.jenkins-ci.plugins:credentials (1.6)

org.jenkins-ci.plugins:credentials MAVEN version 1.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - org.jenkins-ci.plugins:git-client =1.1.2, =1.18, =1.2, =1.0, =1.0, =1.2 -...

org.jenkins-ci.plugins:git (>=1.6.0-beta-1, <=2.0-beta-2), org.jenkins-ci.plugins:mercurial (>=1.47, <=1.48) +1 more potentially affected by CVE-2024-47805 via org.jenkins-ci.plugins:credentials (1.7.6)

org.jenkins-ci.plugins:credentials MAVEN version 1.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - org.jenkins-ci.plugins:git =1.6.0-beta-1, =1.47, =1.48 -...

org.jenkins-ci.plugins:credentials-binding (1.0-beta-1), org.jenkins-ci.plugins:plain-credentials (>=1.0-beta-1, <=1.0) potentially affected by CVE-2024-47805 via org.jenkins-ci.plugins:credentials (1.8.2)

org.jenkins-ci.plugins:credentials MAVEN version 1.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - org.jenkins-ci.plugins:credentials-binding 1.0-beta-1 -...

com.coravy.hudson.plugins.github:github (>=1.9, <=1.12.1), org.jenkins-ci.plugins:elasticbox (>=0.9.14, <=4.0.0) +7 more potentially affected by CVE-2024-47805 via org.jenkins-ci.plugins:credentials (1.8.3)

org.jenkins-ci.plugins:credentials MAVEN version 1.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - com.coravy.hudson.plugins.github:github =1.9, =0.9.14, =2.0-beta-3, =1.4.6, =1.5, =1.3,...

com.cloudbees.jenkins.plugins:mansion-cloud (>=1.16, <=1.25), com.lookout.jenkins:environment-script (1.2.5) +6 more potentially affected by CVE-2024-47805 via org.jenkins-ci.plugins:credentials (1.9.1)

org.jenkins-ci.plugins:credentials MAVEN version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - com.cloudbees.jenkins.plugins:mansion-cloud =1.16, =0.1, =1.3.0-beta, =2.7, =1.25, =1.26 -...

org.jenkins-ci.plugins:credentials-binding (1.0) potentially affected by CVE-2024-47805 via org.jenkins-ci.plugins:credentials (1.13)

org.jenkins-ci.plugins:credentials MAVEN version 1.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - org.jenkins-ci.plugins:credentials-binding 1.0 Source cves: CVE-2024-47805 Source advisory:...

com.mathworks.polyspace.jenkins:mathworks-polyspace (0.1.0), eu.markov.jenkins.plugin.mvnmeta:maven-metadata-plugin (2.0.0) +4 more potentially affected by CVE-2024-47805 via org.jenkins-ci.plugins:credentials (1.14)

org.jenkins-ci.plugins:credentials MAVEN version 1.14 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - com.mathworks.polyspace.jenkins:mathworks-polyspace 0.1.0 -...

org.jenkins-ci.plugins:assembla-merge-request-builder (>=1.1.1, <=1.1.13), org.jenkins-ci.plugins:bitbucket-pullrequest-builder (>=1.4.6, <=1.4.28) +6 more potentially affected by CVE-2024-47805 via org.jenkins-ci.plugins:credentials (1.15)

org.jenkins-ci.plugins:credentials MAVEN version 1.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - org.jenkins-ci.plugins:assembla-merge-request-builder =1.1.1, =1.4.6, =1.13-1, =2.2.3, =1.0....

com.aliyun.www:aliyun-container-service-deploy (0.1.0), de.tsystems.mms.apm:loadrunner (1.1) +10 more potentially affected by CVE-2024-47805 via org.jenkins-ci.plugins:credentials (1.18)

org.jenkins-ci.plugins:credentials MAVEN version 1.18 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - com.aliyun.www:aliyun-container-service-deploy 0.1.0 - de.tsystems.mms.apm:loadrunner 1.1 -...

br.com.ingenieux.jenkins.plugins:awseb-deployment-plugin (>=0.1.0, <=0.3.15), br.com.ingenieux.jenkins.plugins:codecommit-url-helper (0.0.1) +68 more potentially affected by CVE-2024-47805 via org.jenkins-ci.plugins:credentials (1.22)

org.jenkins-ci.plugins:credentials MAVEN version 1.22 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - br.com.ingenieux.jenkins.plugins:awseb-deployment-plugin =0.1.0, =1.0, =1.0-beta-1, =1.2,...

com.cloudbees.jenkins.plugins:cloudbees-registration (3.15), io.jenkins.blueocean:blueocean-pipeline-editor (>=1.0-alpha-3, <=1.0-alpha-4) +3 more potentially affected by CVE-2024-47805 via org.jenkins-ci.plugins:credentials (1.23)

org.jenkins-ci.plugins:credentials MAVEN version 1.23 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - com.cloudbees.jenkins.plugins:cloudbees-registration 3.15 -...

sp.sd:nexus-artifact-uploader (>=2.1, <=2.2) potentially affected by CVE-2024-47805 via org.jenkins-ci.plugins:credentials (1.26)

org.jenkins-ci.plugins:credentials MAVEN version 1.26 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - sp.sd:nexus-artifact-uploader =2.1, =2.2 Source cves: CVE-2024-47805 Source advisory:...

com.spcow.plugins:winrm-client (1.0), de.taimos:pipeline-aws (>=1.14, <=1.20) +17 more potentially affected by CVE-2024-47805 via org.jenkins-ci.plugins:credentials (2.1.0)

org.jenkins-ci.plugins:credentials MAVEN version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - com.spcow.plugins:winrm-client 1.0 - de.taimos:pipeline-aws =1.14, =2.1.3, =2.2.2, =2.2.0,...

org.jenkins-ci.plugins:accurev (>=0.7.10, <=0.7.14), org.jenkins-ci.plugins:backlog (>=2.0, <=2.6) +5 more potentially affected by CVE-2024-47805 via org.jenkins-ci.plugins:credentials (2.1.12)

org.jenkins-ci.plugins:credentials MAVEN version 2.1.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - org.jenkins-ci.plugins:accurev =0.7.10, =2.0, =1.0, =1.0.0, =2.0.4-beta-1, =1.0-alpha-2,...

com.amazon.jenkins.fleet:ec2-fleet (>=1.1.3, <=1.8.1), com.datapipe.jenkins.plugins:hashicorp-vault-plugin (>=1.4, <=2.2.0) +31 more potentially affected by CVE-2024-47805 via org.jenkins-ci.plugins:credentials (2.1.13)

org.jenkins-ci.plugins:credentials MAVEN version 2.1.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - com.amazon.jenkins.fleet:ec2-fleet =1.1.3, =1.4, =1.0.0-b25, =1.0.0-b25, =1.0.0-b25,...

de.dentrassi.pm.jenkins:package-drone (>=0.5.0, <=0.6.0), org.jenkins-ci.plugins:codebeamer-xunit-importer (>=1.7, <=1.9) +3 more potentially affected by CVE-2024-47805 via org.jenkins-ci.plugins:credentials (2.1.15)

org.jenkins-ci.plugins:credentials MAVEN version 2.1.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - de.dentrassi.pm.jenkins:package-drone =0.5.0, =1.7, =2.2.4, =2.10, =2.10.5 Source cves:...

de.tsystems.mms.apm:performance-signature-dynatrace (>=2.5.8, <=2.5.8.1), io.jenkins.plugins:in-toto (>=0.1, <=0.3) +4 more potentially affected by CVE-2024-47805 via org.jenkins-ci.plugins:credentials (2.1.17)

org.jenkins-ci.plugins:credentials MAVEN version 2.1.17 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - de.tsystems.mms.apm:performance-signature-dynatrace =2.5.8, =0.1, =1.1.2, =1.14, =1.16...