Lucene search
+L

51 matches found

CNNVD
CNNVD
added 2023/07/12 12:0 a.m.10 views

Jenkins Plugin mabl 跨站请求伪造漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

6.5CVSS6.5AI score0.00437EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/07/12 12:0 a.m.9 views

PT-2023-26200 · Jenkins · Jenkins Mabl Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins mabl Plugin versions 0.0.46 and earlier Description: A cross-site request forgery CSRF vulnerability allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method,...

6.5CVSS6.4AI score0.00437EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2023/07/12 12:0 a.m.9 views

PT-2023-26201 · Jenkins · Jenkins Mabl Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins mabl Plugin versions 0.0.46 and earlier Description: A missing permission check in the Jenkins mabl Plugin allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs...

6.5CVSS6.4AI score0.0067EPSS
SaveExploits0References6
OSV
OSV
added 2022/05/13 1:15 a.m.24 views

GHSA-HMF2-PRM5-RVXM Jenkins mabl Plugin stores credentials in plain text

Jenkins mabl Plugin stores credentials unencrypted in job config.xml files on the Jenkins controller. These credentials can be viewed by users with Extended Read permission, or access to the Jenkins controller file system...

4.3CVSS8.7AI score0.0174EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2022/05/13 1:15 a.m.25 views

Jenkins mabl Plugin stores credentials in plain text

Jenkins mabl Plugin stores credentials unencrypted in job config.xml files on the Jenkins controller. These credentials can be viewed by users with Extended Read permission, or access to the Jenkins controller file system...

8.8CVSS6.8AI score0.0174EPSS
SaveExploits0References4Affected Software1
CNVD
CNVD
added 2019/10/15 12:0 a.m.6 views

CloudBees Jenkins mabl Plugin Trust Management Issue Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . mabl Plugin is used in one of the plug-ins . ...

8.8CVSS6.9AI score0.0174EPSS
SaveExploits0References1
NVD
NVD
added 2019/04/04 4:29 p.m.39 views

CVE-2019-10283

Jenkins mabl Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

8.8CVSS8.7AI score0.0174EPSS
SaveExploits0References3
Prion
Prion
added 2019/04/04 4:29 p.m.25 views

Design/Logic Flaw

Jenkins mabl Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

4CVSS8.6AI score0.0174EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2019/04/04 3:38 p.m.41 views

CVE-2019-10283

Jenkins mabl Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

8.7AI score0.0174EPSS
SaveExploits0References3
CVE
CVE
added 2019/04/04 3:38 p.m.71 views

CVE-2019-10283

The CVE-2019-10283 entry relates to the Jenkins mabl Plugin storing credentials unencrypted in job config.xml files on the Jenkins master/controller, allowing access by users with Extended Read permission or direct master access. This vulnerability is consistently described across multiple source...

8.8CVSS8.6AI score0.0174EPSS
SaveExploits0References3Affected Software1
AlpineLinux
AlpineLinux
added 2019/04/04 3:38 p.m.75 views

CVE-2019-10283

Jenkins mabl Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

8.8CVSS3.3AI score0.0174EPSS
SaveExploits0References3
Rows per page
Query Builder