EUVD-2022-2959

Malicious code in bioql PyPI...

GHSA-W3F7-2QFW-348X Jenkins HipChat Plugin allows credential capture due to incorrect authorization

An improper authorization vulnerability exists in Jenkins HipChat Plugin 2.2.0 and earlier in HipChatNotifier.java that allows attackers with Overall/Read access to send test notifications to an attacker-specified HipChat server with attacker-specified credentials IDs obtained through another...

GHSA-798P-53R7-MGW9 Jenkins HipChat Plugin allows attackers with Overall/Read access to obtain credential IDs

An improper authorization vulnerability exists in Jenkins HipChat Plugin 2.2.0 and earlier in HipChatNotifier.java that allows attackers with Overall/Read access to obtain credentials IDs for credentials stored in Jenkins. As of version 2.2.1, an enumeration of credentials IDs in this plugin...

Jenkins HipChat Plugin allows attackers with Overall/Read access to obtain credential IDs

An improper authorization vulnerability exists in Jenkins HipChat Plugin 2.2.0 and earlier in HipChatNotifier.java that allows attackers with Overall/Read access to obtain credentials IDs for credentials stored in Jenkins. As of version 2.2.1, an enumeration of credentials IDs in this plugin...

Jenkins HipChat Plugin allows credential capture due to incorrect authorization

An improper authorization vulnerability exists in Jenkins HipChat Plugin 2.2.0 and earlier in HipChatNotifier.java that allows attackers with Overall/Read access to send test notifications to an attacker-specified HipChat server with attacker-specified credentials IDs obtained through another...

com.hbakkum.rundeck.plugins:rundeck-hipchat-plugin (>=1.2.0, <=1.7.0) potentially affected by CVE-2021-39132 via org.rundeck:rundeck-core (2.1.1)

org.rundeck:rundeck-core MAVEN version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.rundeck:rundeck-core and may be impacted: - com.hbakkum.rundeck.plugins:rundeck-hipchat-plugin =1.2.0, =1.7.0 Source cves: CVE-2021-39132 Source advisory:...

com.hbakkum.rundeck.plugins:rundeck-hipchat-plugin (1.0.0), org.rundeck-plugins:rundeck-plugins-parent (2) +1 more potentially affected by CVE-2021-39132 via org.rundeck:rundeck-core (1.5.3)

org.rundeck:rundeck-core MAVEN version 1.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.rundeck:rundeck-core and may be impacted: - com.hbakkum.rundeck.plugins:rundeck-hipchat-plugin 1.0.0 - org.rundeck-plugins:rundeck-plugins-parent 2 -...

com.hbakkum.rundeck.plugins:rundeck-hipchat-plugin (>=1.2.0, <=1.7.0) potentially affected by CVE-2021-39133 via org.rundeck:rundeck-core (2.1.1)

org.rundeck:rundeck-core MAVEN version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.rundeck:rundeck-core and may be impacted: - com.hbakkum.rundeck.plugins:rundeck-hipchat-plugin =1.2.0, =1.7.0 Source cves: CVE-2021-39133 Source advisory:...

com.hbakkum.rundeck.plugins:rundeck-hipchat-plugin (1.0.0), org.rundeck-plugins:rundeck-plugins-parent (2) +1 more potentially affected by CVE-2021-39133 via org.rundeck:rundeck-core (1.5.3)

org.rundeck:rundeck-core MAVEN version 1.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.rundeck:rundeck-core and may be impacted: - com.hbakkum.rundeck.plugins:rundeck-hipchat-plugin 1.0.0 - org.rundeck-plugins:rundeck-plugins-parent 2 -...

Unspecified Vulnerability in CloudBees Jenkins HipChat Plugin

CloudBees Jenkins formerly known as Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and some of the timed execution of the task . HipCha...

CloudBees Jenkins HipChat Plugin Privilege Checking Vulnerability

CloudBees Jenkins formerly known as Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and some of the timed execution of the task . HipCha...

CVE-2018-1000419

An improper authorization vulnerability exists in Jenkins HipChat Plugin 2.2.0 and earlier in HipChatNotifier.java that allows attackers with Overall/Read access to obtain credentials IDs for credentials stored in Jenkins...

CVE-2018-1000418

An improper authorization vulnerability exists in Jenkins HipChat Plugin 2.2.0 and earlier in HipChatNotifier.java that allows attackers with Overall/Read access to send test notifications to an attacker-specified HipChat server with attacker-specified credentials IDs obtained through another...

Authorization

An improper authorization vulnerability exists in Jenkins HipChat Plugin 2.2.0 and earlier in HipChatNotifier.java that allows attackers with Overall/Read access to obtain credentials IDs for credentials stored in Jenkins...

CVE-2018-1000419

An improper authorization vulnerability exists in Jenkins HipChat Plugin 2.2.0 and earlier in HipChatNotifier.java that allows attackers with Overall/Read access to obtain credentials IDs for credentials stored in Jenkins...

CVE-2018-1000418

An improper authorization vulnerability exists in Jenkins HipChat Plugin 2.2.0 and earlier in HipChatNotifier.java that allows attackers with Overall/Read access to send test notifications to an attacker-specified HipChat server with attacker-specified credentials IDs obtained through another...

CVE-2018-1000418

CVE-2018-1000418 affects Jenkins HipChat Plugin (versions ≤ 2.2.0). The HipChatNotifier.java improper authorization allows users with Overall/Read access to trigger test notifications to an attacker-controlled HipChat server using attacker-specified credential IDs, enabling capture of credentials...

CVE-2018-1000419

The CVE-2018-1000419 entry concerns Jenkins HipChat Plugin (versions up to 2.2.0). The vulnerability lies in HipChatNotifier.java, enabling attackers with Overall/Read access to enumerate credentials IDs stored in Jenkins. Public references (GHSA, NVD) indicate that from version 2.2.1 the plugin ...

CVE-2018-1000418

An improper authorization vulnerability exists in Jenkins HipChat Plugin 2.2.0 and earlier in HipChatNotifier.java that allows attackers with Overall/Read access to send test notifications to an attacker-specified HipChat server with attacker-specified credentials IDs obtained through another...

CVE-2018-1000419

An improper authorization vulnerability exists in Jenkins HipChat Plugin 2.2.0 and earlier in HipChatNotifier.java that allows attackers with Overall/Read access to obtain credentials IDs for credentials stored in Jenkins...