com.apica:apicaloadtest (>=1.1, <=1.10), com.infullmobile.jenkins.plugin:restricted-register (0.1.7) +4 more potentially affected by CVE-2017-2600 via org.jenkins-ci.main:jenkins-core (1.610)

org.jenkins-ci.main:jenkins-core MAVEN version 1.610 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.apica:apicaloadtest =1.1, =1.4, =1.7.2 - org.jenkins-ci.plugins:plugin 1.610 Source cves:...

CSRF vulnerability in Jenkins OpenShift Deployer Plugin

A cross-site request forgery vulnerability in Jenkins OpenShift Deployer Plugin in the DeployApplication.DeployApplicationDescriptordoCheckLogin form validation method allows attackers to initiate a connection to an attacker-specified server...

CSRF vulnerability in Jenkins OpenShift Deployer Plugin

A missing permission check in Jenkins OpenShift Deployer Plugin in the DeployApplication.DeployApplicationDescriptordoCheckLogin form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server...

GHSA-RQF2-4GGC-C74W Jenkins WebSphere Deployer Plugin stores credentials in plain text

Jenkins WebSphere Deployer Plugin stores credentials unencrypted in job config.xml files on the Jenkins controller. These credentials can be viewed by users with Extended Read permission, or access to the Jenkins controller file system...

Jenkins WebSphere Deployer Plugin stores credentials in plain text

Jenkins WebSphere Deployer Plugin stores credentials unencrypted in job config.xml files on the Jenkins controller. These credentials can be viewed by users with Extended Read permission, or access to the Jenkins controller file system...

Jenkins wildFly Deployer Plugin stores credentials in plain text

Jenkins WildFly Deployer Plugin stores deployment credentials unencrypted in job config.xml files on the Jenkins controller. These credentials can be viewed by users with Extended Read permission, or access to the Jenkins controller file system...

GHSA-8J62-29JG-6HJ6 Jenkins wildFly Deployer Plugin stores credentials in plain text

Jenkins WildFly Deployer Plugin stores deployment credentials unencrypted in job config.xml files on the Jenkins controller. These credentials can be viewed by users with Extended Read permission, or access to the Jenkins controller file system...

org.jenkins-ci.plugins:email-ext (>=2.37, <=2.37.2.2), org.jenkins-ci.plugins:nodelabelparameter (>=1.5.0-beta, <=1.5.1) +5 more potentially affected by CVE-2019-1003011 via org.jenkins-ci.plugins:token-macro (1.9)

org.jenkins-ci.plugins:token-macro MAVEN version 1.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:token-macro and may be impacted: - org.jenkins-ci.plugins:email-ext =2.37, =1.5.0-beta, =1.0.3, =2.0, =0.1-beta, =0.6.8, =1.1.1...

net.stickycode.deploy:sticky-deployer-tomcat8 (2.1), org.sakaiproject:sakai-dav-server (>=11.0, <=11.3) potentially affected by CVE-2016-8735 via org.apache.tomcat:tomcat-catalina-jmx-remote (>=8.0.20, <=8.0.32)

org.apache.tomcat:tomcat-catalina-jmx-remote MAVEN version =8.0.20, =11.0, =11.3 Source cves: CVE-2016-8735 Source advisory: GHSA-CW54-59PW-4G8C...

com.apica:apicaloadtest (>=1.1, <=1.10), com.infullmobile.jenkins.plugin:restricted-register (0.1.7) +4 more potentially affected by CVE-2018-1999002 via org.jenkins-ci.main:jenkins-core (1.610)

org.jenkins-ci.main:jenkins-core MAVEN version 1.610 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.apica:apicaloadtest =1.1, =1.4, =1.7.2 - org.jenkins-ci.plugins:plugin 1.610 Source cves:...

com.apica:apicaloadtest (>=1.1, <=1.10), com.infullmobile.jenkins.plugin:restricted-register (0.1.7) +4 more potentially affected by CVE-2018-1000194 via org.jenkins-ci.main:jenkins-core (1.610)

org.jenkins-ci.main:jenkins-core MAVEN version 1.610 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.apica:apicaloadtest =1.1, =1.4, =1.7.2 - org.jenkins-ci.plugins:plugin 1.610 Source cves:...

com.apica:apicaloadtest (>=1.1, <=1.10), com.infullmobile.jenkins.plugin:restricted-register (0.1.7) +4 more potentially affected by CVE-2019-1003050 via org.jenkins-ci.main:jenkins-core (1.610)

org.jenkins-ci.main:jenkins-core MAVEN version 1.610 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.apica:apicaloadtest =1.1, =1.4, =1.7.2 - org.jenkins-ci.plugins:plugin 1.610 Source cves:...

com.amazonaws:codedeploy (>=1.3, <=1.11), com.sonyericsson.hudson.plugins.multi-slave-config-plugin:multi-slave-config-plugin (>=1.1.0, <=1.2.0) +18 more potentially affected by CVE-2018-1999005 via org.jenkins-ci.main:jenkins-core (1.554)

org.jenkins-ci.main:jenkins-core MAVEN version 1.554 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.amazonaws:codedeploy =1.3, =1.1.0, =1.2.3, =1.1.0, =1.0, =1.0, =1.0, =2.0.4, =1.10, =1.15,...

com.apica:apicaloadtest (>=1.1, <=1.10), com.infullmobile.jenkins.plugin:restricted-register (0.1.7) +4 more potentially affected by CVE-2018-1999001 via org.jenkins-ci.main:jenkins-core (1.610)

org.jenkins-ci.main:jenkins-core MAVEN version 1.610 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.apica:apicaloadtest =1.1, =1.4, =1.7.2 - org.jenkins-ci.plugins:plugin 1.610 Source cves:...

com.base2services.jenkins:github-sqs-plugin (>=1.0, <=1.5), org.jenkins-ci.main:jenkins-test-harness (1.451) +9 more potentially affected by CVE-2018-1999001 via org.jenkins-ci.main:jenkins-core (1.451)

org.jenkins-ci.main:jenkins-core MAVEN version 1.451 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.base2services.jenkins:github-sqs-plugin =1.0, =2.4, =1.1, =1.3 Source cves: CVE-2018-199900...

com.apica:apicaloadtest (>=1.1, <=1.10), com.infullmobile.jenkins.plugin:restricted-register (0.1.7) +4 more potentially affected by CVE-2018-1999003 via org.jenkins-ci.main:jenkins-core (1.610)

org.jenkins-ci.main:jenkins-core MAVEN version 1.610 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.apica:apicaloadtest =1.1, =1.4, =1.7.2 - org.jenkins-ci.plugins:plugin 1.610 Source cves:...

org.jenkins-ci.plugins:crx-content-package-deployer (>=1.5, <=1.9) potentially affected by CVE-2022-29036 via org.jenkins-ci.plugins:credentials (1.17)

org.jenkins-ci.plugins:credentials MAVEN version 1.17 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - org.jenkins-ci.plugins:crx-content-package-deployer =1.5, =1.9 Source cves: CVE-2022-29036...

org.springframework.cloud:spring-cloud-function-adapter-aws (1.0.1.release), org.springframework.cloud:spring-cloud-function-adapter-azure (1.0.1.release) +6 more potentially affected by CVE-2022-22963 via org.springframework.cloud:spring-cloud-function-context (1.0.1.release)

org.springframework.cloud:spring-cloud-function-context MAVEN version 1.0.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-function-context and may be impacted: -...

org.springframework.cloud:spring-cloud-function-adapter-aws (1.0.2.release), org.springframework.cloud:spring-cloud-function-adapter-azure (1.0.2.release) +6 more potentially affected by CVE-2022-22963 via org.springframework.cloud:spring-cloud-function-context (1.0.2.release)

org.springframework.cloud:spring-cloud-function-context MAVEN version 1.0.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-function-context and may be impacted: -...

com.fnproject.fn:fn-spring-cloud-function (>=1.0.70, <=1.0.109), org.springframework.cloud:spring-cloud-function-adapter-aws (1.0.0.release) +7 more potentially affected by CVE-2022-22963 via org.springframework.cloud:spring-cloud-function-context (1.0.0.release)

org.springframework.cloud:spring-cloud-function-context MAVEN version 1.0.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-function-context and may be impacted: - com.fnproject.fn:fn-spring-cloud-function...