1449 matches found
PT-2023-24866 · Jenkins · Jenkins Plug-In For Servicenow Devops +1
Name of the Vulnerable Software and Affected Versions: Jenkins Plug-in for ServiceNow DevOps versions prior to 1.38.1 Description: A missing authorization issue exists that could lead to the unwanted exposure of sensitive information if exploited successfully. Recommendations: For versions prior ...
PT-2023-24694 · Jenkins · Jenkins Plug-In For Servicenow Devops +1
Name of the Vulnerable Software and Affected Versions: Jenkins Plug-in for ServiceNow DevOps versions prior to 1.38.1 Description: A cross-site request forgery issue exists that could cause the unwanted exposure of sensitive information if exploited successfully. Recommendations: For versions pri...
AI Coding Companions: Comparing AWS, GitHub, & Google
Top cloud vendors and software companies are rolling out AI coding companions that use generative AI to speed up and streamline DevOps. In this blog, we take a look at what some of these new tools have in common, where they differ, and what they mean for cybersecurity...
Azure DevOps Server 2022 XSS
The Microsoft Team Foundation Server or Azure DevOps install is missing security updates. It is, therefore, affected by a cross-site scripting vulnerability. An attacker who successfully exploited the vulnerability could access data that is available for the current user. Depending on the user's...
The vulnerability of the Azure DevOps Server software, related to errors in information presentation on the user interface, allows attackers to perform spear-phishing attacks.
The vulnerability of the Azure DevOps Server software relates to errors in information presentation by the user interface. Exploiting this vulnerability could allow a malicious actor to perform spear-phishing attacks remotely...
The vulnerability of the Azure DevOps Server software, related to errors in information presentation on the user interface, allows attackers to perform spear-phishing attacks.
The vulnerability of the Azure DevOps Server software relates to errors in information presentation by the user interface. Exploiting this vulnerability could allow a malicious actor to perform spear-phishing attacks remotely...
Security Updates for Microsoft Team Foundation Server and Azure DevOps Server (June 2023)
The Microsoft Team Foundation Server or Azure DevOps install is missing security updates. It is, therefore, affected by multiple server spoofing vulnerabilities. An attacker who successfully exploited the vulnerability could access data that is available for the current user. Depending on the...
CVE-2023-21569
Azure DevOps Server Spoofing Vulnerability...
CVE-2023-21569
Azure DevOps Server Spoofing Vulnerability...
CVE-2023-21565
Azure DevOps Server Spoofing Vulnerability...
CVE-2023-21565
Azure DevOps Server Spoofing Vulnerability...
CVE-2023-21569
Azure DevOps Server Spoofing Vulnerability...
CVE-2023-21565
Azure DevOps Server Spoofing Vulnerability...
Spoofing
Azure DevOps Server Spoofing Vulnerability...
Spoofing
Azure DevOps Server Spoofing Vulnerability...
CVE-2023-21569 Azure DevOps Server Spoofing Vulnerability
...
CVE-2023-21569 Azure DevOps Server Spoofing Vulnerability
...
CVE-2023-21565 Azure DevOps Server Spoofing Vulnerability
...
CVE-2023-21565 Azure DevOps Server Spoofing Vulnerability
...
CVE-2023-21565
CVE-2023-21565 : Azure DevOps Server spoofing vulnerability with CVSS 3.1 base score 7.1 (HIGH). Public exploits exist. Affected products across connected sources include Azure DevOps Server 2022, Azure DevOps Server 2020.1.2, and Azure DevOps Server 2022.0.1. The vulnerability is a server-side s...