com.dubture.jenkins:digitalocean-plugin (>=0.9, <=0.12), com.inkysea.vmware.vra:vmware-vrealize-automation-plugin (>=1.2.1, <=1.2.3) +8 more potentially affected by CVE-2020-2099 via org.jenkins-ci.main:jenkins-core (1.642.2)

org.jenkins-ci.main:jenkins-core MAVEN version 1.642.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.dubture.jenkins:digitalocean-plugin =0.9, =1.2.1, =0.0.8, =0.6, =2.4.2, =1.13-alpha, =0.1...

com.dubture.jenkins:digitalocean-plugin (>=0.1, <=0.2), org.jenkins-ci.main:jenkins-test-harness (1.550) +2 more potentially affected by CVE-2020-2100 via org.jenkins-ci.main:jenkins-core (1.550)

org.jenkins-ci.main:jenkins-core MAVEN version 1.550 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.dubture.jenkins:digitalocean-plugin =0.1, =0.2 - org.jenkins-ci.main:jenkins-test-harness...

com.antelink.reporter.jenkins.plugin:antepediareporter-ci-plugin (>=1.7, <=1.8), com.dubture.jenkins:digitalocean-plugin (>=0.1, <=0.2) +39 more potentially affected by CVE-2014-2067 via org.jenkins-ci.main:jenkins-core (>=1.533, <=1.550)

org.jenkins-ci.main:jenkins-core MAVEN version =1.533, =1.7, =0.1, =1.53, =1.0.0, =0.1, =1.533, =1.533, =1.533, =1.533, =1.18, =3.0.0, =3.0.1 and more Source cves: CVE-2014-2067 Source advisory: OSV:GHSA-VJ6Q-V2H7-6Q5M...

com.dubture.jenkins:digitalocean-plugin (>=0.9, <=0.12), com.inkysea.vmware.vra:vmware-vrealize-automation-plugin (>=1.2.1, <=1.2.3) +8 more potentially affected by CVE-2018-1999047 via org.jenkins-ci.main:jenkins-core (1.642.2)

org.jenkins-ci.main:jenkins-core MAVEN version 1.642.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.dubture.jenkins:digitalocean-plugin =0.9, =1.2.1, =0.0.8, =0.6, =2.4.2, =1.13-alpha, =0.1...

com.dubture.jenkins:digitalocean-plugin (>=0.1, <=0.2), org.jenkins-ci.main:jenkins-test-harness (1.550) +2 more potentially affected by CVE-2017-2598 via org.jenkins-ci.main:jenkins-core (1.550)

org.jenkins-ci.main:jenkins-core MAVEN version 1.550 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.dubture.jenkins:digitalocean-plugin =0.1, =0.2 - org.jenkins-ci.main:jenkins-test-harness...

com.dubture.jenkins:digitalocean-plugin (>=0.1, <=0.2), org.jenkins-ci.main:jenkins-test-harness (1.550) +2 more potentially affected by CVE-2017-2602 via org.jenkins-ci.main:jenkins-core (1.550)

org.jenkins-ci.main:jenkins-core MAVEN version 1.550 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.dubture.jenkins:digitalocean-plugin =0.1, =0.2 - org.jenkins-ci.main:jenkins-test-harness...

Unspecified Vulnerability in CloudBees Jenkins DigitalOcean Plugin

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools . A security vulnerability exists in the CloudBees Jenkins DigitalOcean plugin, which can be exploited by an attacker to access the user view of the main file syste...

CVE-2020-2126

Jenkins DigitalOcean Plugin 1.1 and earlier stores a token unencrypted in the global config.xml file on the Jenkins master where it can be viewed by users with access to the master file system...

CVE-2020-2126

Jenkins DigitalOcean Plugin 1.1 and earlier stores a token unencrypted in the global config.xml file on the Jenkins master where it can be viewed by users with access to the master file system...

CVE-2020-2126: Insufficiently Protected Credentials

Jenkins DigitalOcean Plugin 1.1 and earlier stores a token unencrypted in the global config.xml file on the Jenkins master where it can be viewed by users with access to the master file system...