PT-2026-72482

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the LoongArch architecture, the kvm vcpu ioctl interrupt function can be called from userspace without proper validation of the interrupt request irq. This lack of validity checking...

CVE-2024-47805

Jenkins Credentials Plugin 1380.va435002fa924 and earlier, except 1371.1373.v4ebfab7161e9, does not redact encrypted values of credentials using the SecretBytes type when accessing item config.xml via REST API or CLI...

Jenkins plugins Multiple Vulnerabilities (2024-10-02)

According to their self-reported version numbers, the version of Jenkins plugins running on the remote web server are affected by multiple vulnerabilities: - Jenkins Credentials Plugin 1380.va435002fa924 and earlier, except 1371.1373.v4ebfab7161e9, does not redact encrypted values of credentials...

org.jenkins-ci.plugins:email-ext (2.100) potentially affected by CVE-2024-47805 via org.jenkins-ci.plugins:credentials (1268.v3f0d043d60e9)

org.jenkins-ci.plugins:credentials MAVEN version 1268.v3f0d043d60e9 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - org.jenkins-ci.plugins:email-ext 2.100 Source cves: CVE-2024-47805 Source...

com.spcow.plugins:winrm-client (1.0), de.taimos:pipeline-aws (>=1.14, <=1.20) +17 more potentially affected by CVE-2024-47805 via org.jenkins-ci.plugins:credentials (2.1.0)

org.jenkins-ci.plugins:credentials MAVEN version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - com.spcow.plugins:winrm-client 1.0 - de.taimos:pipeline-aws =1.14, =2.1.3, =2.2.2, =2.2.0,...

org.jenkins-ci.plugins.pipeline-stage-view:pipeline-rest-api (2.32), org.jenkins-ci.plugins.pipeline-stage-view:pipeline-stage-view (2.32) +2 more potentially affected by CVE-2024-47805 via org.jenkins-ci.plugins:credentials (2.6.1)

org.jenkins-ci.plugins:credentials MAVEN version 2.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - org.jenkins-ci.plugins.pipeline-stage-view:pipeline-rest-api 2.32 -...

com.amadeus.jenkins.plugins:workflow-cps-global-lib-http (>=2.40.0, <=2.54.0), com.perforce.halm.jenkins:helix-alm-test-management (>=1.0.15-beta, <=1.0.15) +11 more potentially affected by CVE-2024-47805 via org.jenkins-ci.plugins:credentials (1307.v3757c78f17c3)

org.jenkins-ci.plugins:credentials MAVEN version 1307.v3757c78f17c3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - com.amadeus.jenkins.plugins:workflow-cps-global-lib-http =2.40.0, =1.0.15-beta...

com.openshift.jenkins.plugins:openshift-client (>=1.1.0.420.v8817277c1990, <=1.1.0.422.va_241c0c97580), io.jenkins.plugins:autograding (>=4.0.0, <=4.1.0) +7 more potentially affected by CVE-2024-47805 via org.jenkins-ci.plugins:credentials (1254.vb_96f366e7b_a_d)

org.jenkins-ci.plugins:credentials MAVEN version 1254.vb96f366e7bad is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - com.openshift.jenkins.plugins:openshift-client =1.1.0.420.v8817277c1990, =4.0....

com.aliyun.www:aliyun-container-service-deploy (0.1.0), de.tsystems.mms.apm:loadrunner (1.1) +10 more potentially affected by CVE-2024-47805 via org.jenkins-ci.plugins:credentials (1.18)

org.jenkins-ci.plugins:credentials MAVEN version 1.18 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - com.aliyun.www:aliyun-container-service-deploy 0.1.0 - de.tsystems.mms.apm:loadrunner 1.1 -...

org.jenkins-ci.plugins:jobcacher (>=387.v41e893017398, <=399.v12d4fa_dd3db_d) potentially affected by CVE-2024-47805 via org.jenkins-ci.plugins:credentials (1214.v1de940103927)

org.jenkins-ci.plugins:credentials MAVEN version 1214.v1de940103927 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - org.jenkins-ci.plugins:jobcacher =387.v41e893017398, =399.v12d4fadd3dbd Source...

com.openshift.jenkins.plugins:openshift-client (1.1.0.424.v829cb_ccf8798), io.jenkins.plugins:extra-tool-installers (135.vb_6fc596d8e8e) +13 more potentially affected by CVE-2024-47805 via org.jenkins-ci.plugins:credentials (1311.vcf0a_900b_37c2)

org.jenkins-ci.plugins:credentials MAVEN version 1311.vcf0a900b37c2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - com.openshift.jenkins.plugins:openshift-client 1.1.0.424.v829cbccf8798 -...

org.jenkins-ci.plugins:credentials-binding (1.0-beta-1), org.jenkins-ci.plugins:plain-credentials (>=1.0-beta-1, <=1.0) potentially affected by CVE-2024-47805 via org.jenkins-ci.plugins:credentials (1.8.2)

org.jenkins-ci.plugins:credentials MAVEN version 1.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - org.jenkins-ci.plugins:credentials-binding 1.0-beta-1 -...

com.mig82:folder-properties (57.vde5161ec7a_b_a), de.tracetronic.jenkins.plugins:ecu-test-execution (>=3.5, <=3.10) +24 more potentially affected by CVE-2024-47805 via org.jenkins-ci.plugins:credentials (1337.v60b_d7b_c7b_c9f)

org.jenkins-ci.plugins:credentials MAVEN version 1337.v60bd7bc7bc9f is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - com.mig82:folder-properties 57.vde5161ec7aba -...

de.tsystems.mms.apm:performance-signature-dynatrace (>=2.5.8, <=2.5.8.1), io.jenkins.plugins:in-toto (>=0.1, <=0.3) +4 more potentially affected by CVE-2024-47805 via org.jenkins-ci.plugins:credentials (2.1.17)

org.jenkins-ci.plugins:credentials MAVEN version 2.1.17 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - de.tsystems.mms.apm:performance-signature-dynatrace =2.5.8, =0.1, =1.1.2, =1.14, =1.16...

org.jenkins-ci.plugins:assembla-merge-request-builder (>=1.1.1, <=1.1.13), org.jenkins-ci.plugins:bitbucket-pullrequest-builder (>=1.4.6, <=1.4.28) +6 more potentially affected by CVE-2024-47805 via org.jenkins-ci.plugins:credentials (1.15)

org.jenkins-ci.plugins:credentials MAVEN version 1.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - org.jenkins-ci.plugins:assembla-merge-request-builder =1.1.1, =1.4.6, =1.13-1, =2.2.3, =1.0....

io.jenkins.plugins:bitbucket-kubernetes-credentials (202.v15b_72a_698524), io.jenkins.plugins:npm-yarn-wrapper-steps (>=0.0.1, <=0.4.0) +1 more potentially affected by CVE-2024-47805 via org.jenkins-ci.plugins:credentials (2.3.15)

org.jenkins-ci.plugins:credentials MAVEN version 2.3.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - io.jenkins.plugins:bitbucket-kubernetes-credentials 202.v15b72a698524 -...

com.openshift.jenkins.plugins:openshift-client (1.1.0.413.v3023d27e8434), de.peass:peass-ci (2.3.9-1285.va_202a_66e21fa) +6 more potentially affected by CVE-2024-47805 via org.jenkins-ci.plugins:credentials (1224.vc23ca_a_9a_2cb_0)

org.jenkins-ci.plugins:credentials MAVEN version 1224.vc23caa9a2cb0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - com.openshift.jenkins.plugins:openshift-client 1.1.0.413.v3023d27e8434 -...

org.jenkins-ci.plugins:credentials-binding (1.0) potentially affected by CVE-2024-47805 via org.jenkins-ci.plugins:credentials (1.13)

org.jenkins-ci.plugins:credentials MAVEN version 1.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - org.jenkins-ci.plugins:credentials-binding 1.0 Source cves: CVE-2024-47805 Source advisory:...

com.mathworks.polyspace.jenkins:mathworks-polyspace (0.1.0), eu.markov.jenkins.plugin.mvnmeta:maven-metadata-plugin (2.0.0) +4 more potentially affected by CVE-2024-47805 via org.jenkins-ci.plugins:credentials (1.14)

org.jenkins-ci.plugins:credentials MAVEN version 1.14 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - com.mathworks.polyspace.jenkins:mathworks-polyspace 0.1.0 -...

au.com.versent.jenkins.plugins:ignore-committer-strategy (29.v7c3891a_434c3), com.checkmarx.jenkins:checkmarx-ast-scanner (>=2.0.13-668.ve20f04761b_01, <=2.0.13-871.v96f7e1613d5f) +29 more potentially affected by CVE-2024-47805 via org.jenkins-ci.plugins:credentials (>=1378.v81ef4269d764, <=1380.va_435002fa_924)

org.jenkins-ci.plugins:credentials MAVEN version =1378.v81ef4269d764, =2.0.13-668.ve20f04761b01, =160.v665f6bbddc55, =139.v0bc2603876bc, =3.1419.v3b27ca911066, =382.vf64d6f626060, =393.v6a3d1e251274 and more Source cves: CVE-2024-47...