com.groupon.jenkins-ci.plugins:dotci (>=1.1.0, <=2.27.0), com.groupon.jenkins-ci.plugins:dotci-dockerpublish (>=1.0.0, <=1.0.3) +8 more potentially affected by CVE-2017-1000242 via org.jenkins-ci.plugins:git-client (1.6.3)

org.jenkins-ci.plugins:git-client MAVEN version 1.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - com.groupon.jenkins-ci.plugins:dotci =1.1.0, =1.0.0, =1.0.1, =1.1.3, =1.7.2, =1.1.0, =1.0.0,...

org.jenkins-ci.plugins.workflow:workflow-aggregator (>=0.1-beta-1, <=0.1-beta-4), org.jenkins-ci.plugins.workflow:workflow-scm-step (>=0.1-beta-1, <=0.1-beta-4) +2 more potentially affected by CVE-2017-1000242 via org.jenkins-ci.plugins:git-client (1.9.0)

org.jenkins-ci.plugins:git-client MAVEN version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator =0.1-beta-1, =0.1-beta-1, =1.6.1, =1.6.7...

org.jenkins-ci.plugins:git (2.3.1), org.jenkins-ci.plugins:gitlab-plugin (>=1.1.6, <=1.1.28) +2 more potentially affected by CVE-2017-1000242 via org.jenkins-ci.plugins:git-client (1.12.0)

org.jenkins-ci.plugins:git-client MAVEN version 1.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins:git 2.3.1 - org.jenkins-ci.plugins:gitlab-plugin =1.1.6, =2.2.0,...

com.coravy.hudson.plugins.github:github (>=1.28.0, <=1.29.4), io.fabric8.jenkins.plugins:openshift-sync (>=y, <=1.0.45) +22 more potentially affected by CVE-2017-1000242 via org.jenkins-ci.plugins:git-client (>=2.0.0-beta1, <=2.4.0)

org.jenkins-ci.plugins:git-client MAVEN version =2.0.0-beta1, =1.28.0, =y, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =0.1-preview-4, =2.8, =2.2.0-alpha-1, =1.0, =1.40.0, =3.0.0-beta1, =3.4.1 and more Source...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.4.3), org.jenkins-ci.plugins.workflow:workflow-cps (1.4.3) +8 more potentially affected by CVE-2017-1000242 via org.jenkins-ci.plugins:git-client (1.11.1)

org.jenkins-ci.plugins:git-client MAVEN version 1.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.4.3 -...

Insecure temporary file usage in Jenkins Git Client Plugin

Jenkins Git Client Plugin 2.4.2 and earlier creates temporary file with insecure permissions resulting in information disclosure...

org.jenkins-ci.plugins:bitbucket-approve (>=1.0.1, <=1.0.3), org.jenkins-ci.plugins:git (>=2.2.10, <=2.3.2) potentially affected by CVE-2017-1000242 via org.jenkins-ci.plugins:git-client (1.13.0)

org.jenkins-ci.plugins:git-client MAVEN version 1.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins:bitbucket-approve =1.0.1, =2.2.10, =2.3.2 Source cves: CVE-2017-10002...

com.barchart.jenkins:maven-release-cascade (>=1.1.0, <=1.3.2), org.jenkins-ci.plugins:git (1.3.0) potentially affected by CVE-2017-1000242 via org.jenkins-ci.plugins:git-client (1.0.4)

org.jenkins-ci.plugins:git-client MAVEN version 1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - com.barchart.jenkins:maven-release-cascade =1.1.0, =1.3.2 - org.jenkins-ci.plugins:git 1.3.0...

com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger (>=2.8.0, <=2.10.1), org.jenkins-ci.plugins:git (1.2.0) potentially affected by CVE-2017-1000242 via org.jenkins-ci.plugins:git-client (1.0.2)

org.jenkins-ci.plugins:git-client MAVEN version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger =2.8.0, =2.10.1 -...

com.qasymphony.ci.jenkins:qtest (>=1.3.0, <=1.4.6), org.biouno:uno-choice (>=1.5-alpha-1, <=1.5.3) +16 more potentially affected by CVE-2017-1000242 via org.jenkins-ci.plugins:git-client (1.11.0)

org.jenkins-ci.plugins:git-client MAVEN version 1.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - com.qasymphony.ci.jenkins:qtest =1.3.0, =1.5-alpha-1, =1.0-alpha-1, =1.0-alpha-1,...

org.jenkins-ci.plugins:assembla-merge-request-builder (>=1.1.1, <=1.1.13), org.jenkins-ci.plugins:bitbucket-pullrequest-builder (>=1.4.6, <=1.4.28) +5 more potentially affected by CVE-2017-1000242 via org.jenkins-ci.plugins:git-client (1.10.1)

org.jenkins-ci.plugins:git-client MAVEN version 1.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins:assembla-merge-request-builder =1.1.1, =1.4.6, =1.13-1, =2.2.3, =1.0....

io.fabric8.pipeline:kubernetes-pipeline-aggregator (1.3), io.fabric8.pipeline:kubernetes-pipeline-devops-steps (1.3) potentially affected by CVE-2017-1000242 via org.jenkins-ci.plugins:git-client (1.19.2)

org.jenkins-ci.plugins:git-client MAVEN version 1.19.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - io.fabric8.pipeline:kubernetes-pipeline-aggregator 1.3 -...

org.jenkins-ci.plugins:git-client (>=1.1, <=1.1.1) potentially affected by CVE-2018-1000601 via org.jenkins-ci.plugins:ssh-credentials (0.4)

org.jenkins-ci.plugins:ssh-credentials MAVEN version 0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:ssh-credentials and may be impacted: - org.jenkins-ci.plugins:git-client =1.1, =1.1.1 Source cves: CVE-2018-1000601 Source...

com.coravy.hudson.plugins.github:github (>=1.9, <=1.13.3), com.elasticbox.jenkins-ci.plugins:elasticbox (>=4.0.9, <=4.1.0) +7 more potentially affected by CVE-2018-1999036 via org.jenkins-ci.plugins:ssh-agent (1.3)

org.jenkins-ci.plugins:ssh-agent MAVEN version 1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:ssh-agent and may be impacted: - com.coravy.hudson.plugins.github:github =1.9, =4.0.9, =0.9.14, =1.13, =1.6.0-beta-1, =1.2.0, =1.8...

org.jenkins-ci.plugins:git-client (1.6.2), org.jenkins-ci.plugins:ssh-agent (>=1.4.1, <=1.4.2) +1 more potentially affected by CVE-2022-29036 via org.jenkins-ci.plugins:credentials (1.9.2)

org.jenkins-ci.plugins:credentials MAVEN version 1.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - org.jenkins-ci.plugins:git-client 1.6.2 - org.jenkins-ci.plugins:ssh-agent =1.4.1, =1.4.2 -...

com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger (2.22.0-beta-1), io.jenkins.plugins:screenrecorder (>=0.3, <=0.7) +14 more potentially affected by CVE-2022-20612 via org.jenkins-ci.main:jenkins-core (1.625)

org.jenkins-ci.main:jenkins-core MAVEN version 1.625 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger 2.22.0-beta-1 -...

com.coravy.hudson.plugins.github:github (>=1.9, <=1.13.3), com.elasticbox.jenkins-ci.plugins:elasticbox (>=4.0.9, <=4.1.0) +7 more potentially affected by CVE-2022-20620 via org.jenkins-ci.plugins:ssh-agent (1.3)

org.jenkins-ci.plugins:ssh-agent MAVEN version 1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:ssh-agent and may be impacted: - com.coravy.hudson.plugins.github:github =1.9, =4.0.9, =0.9.14, =1.13, =1.6.0-beta-1, =1.2.0, =1.8...

Metasploit Wrap-Up

Capture Credentials with our new SMB Server Our own Adam Galway revamped the old SMB capture module and now supports NTLMv1 and NTLMv2, as well as SMB1, SMB2 and SMB3. This was possible thanks to @zeroSteiner's new RubySMB server implementation. Metasploit is now able to capture NTLM hashes from...

org.jenkins-ci.plugins:git-client (1.6.2), org.jenkins-ci.plugins:ssh-agent (>=1.4.1, <=1.4.2) +1 more potentially affected by CVE-2021-21648 via org.jenkins-ci.plugins:credentials (1.9.2)

org.jenkins-ci.plugins:credentials MAVEN version 1.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - org.jenkins-ci.plugins:git-client 1.6.2 - org.jenkins-ci.plugins:ssh-agent =1.4.1, =1.4.2 -...

org.jenkins-ci.plugins:git-client (>=1.1.2, <=1.4.5), org.jenkins-ci.plugins:job-dsl (>=1.18, <=1.19) +4 more potentially affected by CVE-2021-21648 via org.jenkins-ci.plugins:credentials (1.6)

org.jenkins-ci.plugins:credentials MAVEN version 1.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - org.jenkins-ci.plugins:git-client =1.1.2, =1.18, =1.2, =1.0, =1.0, =1.2 -...