Lucene search
+L

68 matches found

Positive Technologies
Positive Technologies
added 2019/10/23 12:00 a.m.12 views

PT-2019-11862 · Jenkins · Jenkins Elasticbox Jenkins Kubernetes Ci/Cd Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins ElasticBox Jenkins Kubernetes CI/CD Plugin affected versions not specified Description: A cross-site request forgery issue allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs, potentially...

8.8CVSS8.5AI score0.00678EPSS
SaveExploits0References8
NVD
NVD
added 2019/10/16 2:15 p.m.27 views

CVE-2019-10450

Jenkins ElasticBox CI Plugin stores credentials unencrypted in the global config.xml configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

3.3CVSS3.8AI score0.00241EPSS
SaveExploits0References1
OSV
OSV
added 2019/10/16 2:15 p.m.18 views

CVE-2019-10450

Jenkins ElasticBox CI Plugin stores credentials unencrypted in the global config.xml configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

3.3CVSS6.9AI score
SaveExploits0References1
Prion
Prion
added 2019/10/16 2:15 p.m.24 views

Design/Logic Flaw

Jenkins ElasticBox CI Plugin stores credentials unencrypted in the global config.xml configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

2.1CVSS3.9AI score0.00241EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2019/10/16 1:00 p.m.86 views

CVE-2019-10450

The CVE-2019-10450 entry concerns the Jenkins ElasticBox CI Plugin, which stores credentials unencrypted in the global config.xml on the Jenkins master. The underlying issue is the plaintext storage of sensitive information in the master configuration, enabling any user with master filesystem acc...

3.3CVSS3.9AI score0.00241EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2019/10/16 1:00 p.m.36 views

CVE-2019-10450

Jenkins ElasticBox CI Plugin stores credentials unencrypted in the global config.xml configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

3.7AI score0.00241EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
added 2019/10/16 1:00 p.m.67 views

CVE-2019-10450

Jenkins ElasticBox CI Plugin stores credentials unencrypted in the global config.xml configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

3.3CVSS3.5AI score0.00241EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2019/10/16 12:00 a.m.11 views

PT-2019-11844 · Jenkins · Jenkins Elasticbox Ci Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins ElasticBox CI Plugin affected versions not specified Description: The issue concerns the storage of credentials in an unencrypted manner within the global config.xml configuration file on the Jenkins master. This allows users with...

3.3CVSS3.6AI score0.00241EPSS
SaveExploits0References4
Rows per page
Query Builder