GHSA-XW4C-9434-3F7P Jenkins Google Kubernetes Engine Plugin vulnerable to Exposure of Resource to Wrong Sphere

Jenkins Google Kubernetes Engine Plugin 0.6.2 and earlier created a temporary file named .kube…config containing a temporary access token in the project workspace, where it could be accessed by users with Job/Read permission. This temporary file is now created outside the regular project workspac...

Jenkins Google Kubernetes Engine Plugin vulnerable to Exposure of Resource to Wrong Sphere

Jenkins Google Kubernetes Engine Plugin 0.6.2 and earlier created a temporary file named .kube…config containing a temporary access token in the project workspace, where it could be accessed by users with Job/Read permission. This temporary file is now created outside the regular project workspac...

Remote code execution

Jenkins Google Kubernetes Engine Plugin 0.8.0 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability...

CVE-2020-2121

Jenkins Google Kubernetes Engine Plugin 0.8.0 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability...

PT-2020-15328 · Jenkins · Jenkins Google Kubernetes Engine Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Google Kubernetes Engine Plugin versions 0.8.0 and earlier Description: The issue is related to the configuration of the YAML parser in the Jenkins Google Kubernetes Engine Plugin, which does not prevent the instantiation of arbitrary...

CloudBees Jenkins Google Kubernetes Engine Plugin Permission Check Missing Vulnerability

CloudBees Jenkins is a set of Java-based development of continuous integration tools . CloudBees Jenkins Google Kubernetes Engine Plugin suffers from a security vulnerability that allows remote attackers to exploit the vulnerability by submitting a special request that can be used to obtain...

CVE-2019-10445

A missing permission check in Jenkins Google Kubernetes Engine Plugin 0.7.0 and earlier allowed attackers with Overall/Read permission to obtain limited information about the scope of a credential with an attacker-specified credentials ID...

CVE-2019-10445

A missing permission check in Jenkins Google Kubernetes Engine Plugin 0.7.0 and earlier allowed attackers with Overall/Read permission to obtain limited information about the scope of a credential with an attacker-specified credentials ID...

CVE-2019-10445

A missing permission check in Jenkins Google Kubernetes Engine Plugin 0.7.0 and earlier allowed attackers with Overall/Read permission to obtain limited information about the scope of a credential with an attacker-specified credentials ID...

CVE-2019-10445

CVE-2019-10445 affects the Jenkins Google Kubernetes Engine Plugin (versions ≤ 0.7.0). A missing permission check enables users with Overall/Read to obtain limited information about a credential’s scope by supplying a credentials ID. The issue is specifically a disclosure vulnerability within the...

CloudBees Jenkins Google Kubernetes Engine Plugin Information Disclosure Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing project and some timed tasks . Google Kubernetes Engine Plugin is used in whi...

CVE-2019-10365

Jenkins Google Kubernetes Engine Plugin 0.6.2 and earlier created a temporary file containing a temporary access token in the project workspace, where it could be accessed by users with Job/Read permission...

Code injection

Jenkins Google Kubernetes Engine Plugin 0.6.2 and earlier created a temporary file containing a temporary access token in the project workspace, where it could be accessed by users with Job/Read permission...

CVE-2019-10365

The CVE-2019-10365 entry concerns Jenkins Google Kubernetes Engine Plugin (versions 0.6.2 and earlier). The underlying issue is that the plugin creates a temporary file containing a temporary access token in the project workspace, exposing it to users with Job/Read permission. Documents from RH R...

PT-2019-11761 · Jenkins · Jenkins Google Kubernetes Engine Plugin

Name of the Vulnerable Software and Affected Versions: Jenkins Google Kubernetes Engine Plugin versions 0.6.2 and earlier Description: The issue concerns the creation of a temporary file containing a temporary access token in the project workspace, which could be accessed by users with Job/Read...