7 matches found
EUVD-2022-5712
Malicious code in bioql PyPI...
CVE-2019-10461
Jenkins Dynatrace Application Monitoring Plugin 2.1.3 and earlier stored credentials unencrypted in its global configuration file on the Jenkins master where they could be viewed by users with access to the master file system...
Unspecified Vulnerability in CloudBees Jenkins Dynatrace Application Monitoring Plugin
CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . Dynatrace Application Monitoring Plugin is us...
CloudBees Jenkins Dynatrace Application Monitoring Plugin Cross-Site Request Forgery Vulnerability
CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . Dynatrace Application Monitoring Plugin is us...
CloudBees Jenkins Dynatrace Application Monitoring Plugin Information Disclosure Vulnerability
CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . Dynatrace Application Monitoring Plugin is us...
PT-2019-11856 · Jenkins · Jenkins Dynatrace Application Monitoring Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Dynatrace Application Monitoring Plugin versions 2.1.3 and earlier Jenkins Dynatrace Application Monitoring Plugin versions prior to 2.1.4 Description: A cross-site request forgery issue allows attackers to connect to an...
PT-2019-11857 · Jenkins · Jenkins Dynatrace Application Monitoring Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Dynatrace Application Monitoring Plugin versions prior to 2.1.5 Description: A missing permission check in the plugin allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified...