CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

OSV•added 2022/05/24 5:3 p.m.•12 views

GHSA-WJ24-XMC5-HJW4 Jenkins Team Concert Plugin missing permission check

A missing permission check in Jenkins Team Concert Plugin 1.3.0 and earlier in form-related methods allowed users with Overall/Read access to enumerate credentials ID of credentials stored in Jenkins...

4.3CVSS4.4AI score0.00031EPSS

Exploits0References4

Github Security Blog•added 2022/05/24 4:59 p.m.•21 views

Jenkins Libvirt Slaves Plugin vlnerable to Credential Enumeration

A missing permission check in Jenkins Libvirt Slaves Plugin in form-related methods allowed users with Overall/Read access to enumerate credentials ID of credentials stored in Jenkins...

4.3CVSS4.3AI score0.00031EPSS

Exploits0References6Affected Software1

OSV•added 2020/02/12 3:15 p.m.•22 views

CVE-2020-2118

A missing permission check in Jenkins Pipeline GitHub Notify Step Plugin 1.0.4 and earlier in form-related methods allowed users with Overall/Read access to enumerate credentials ID of credentials stored in Jenkins...

4.3CVSS6.4AI score

Exploits0References2