Information disclosure

A missing permission check in Synopsys Jenkins Coverity Plugin 3.0.2 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...

CVE-2023-25768

A missing permission check in Jenkins Azure Credentials Plugin 253.v887e0f9e898b and earlier allows attackers with Overall/Read permission to connect to an attacker-specified web server...

Information disclosure

A missing permission check in Jenkins Azure Credentials Plugin 253.v887e0f9e898b and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...

SUSE CVE-2019-16547

Missing permission checks in various API endpoints in Jenkins Google Compute Engine Plugin 4.1.1 and earlier allow attackers with Overall/Read permission to obtain limited information about the plugin configuration and environment...

SUSE CVE-2021-32688

Nextcloud Server is a Nextcloud package that handles data storage. Nextcloud Server supports application specific tokens for authentication purposes. These tokens are supposed to be granted to a specific applications e.g. DAV sync clients, and can also be configured by the user to not have any...

Jenkins Enterprise and Operations Center 2.346.x < 2.346.40.0.9 Multiple Vulnerabilities (CloudBees Security Advisory 2023-02-15)

The version of Jenkins Enterprise or Jenkins Operations Center running on the remote web server is 2.346.x prior to 2.346.40.0.9. It is, therefore, affected by multiple vulnerabilities including the following: - CSRF vulnerability and missing permission checks in Synopsys Coverity Plugin allow...

CVE-2023-25768

A missing permission check in Jenkins Azure Credentials Plugin 253.v887e0f9e898b and earlier allows attackers with Overall/Read permission to connect to an attacker-specified web server...

CVE-2022-47450

In wlan driver, there is a possible missing permission check. This could lead to local information disclosure...

CVE-2022-47355

In log service, there is a missing permission check. This could lead to local denial of service in log service...

CVE-2022-47359

In log service, there is a missing permission check. This could lead to local denial of service in log service...

CVE-2022-47367

In bluetooth driver, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

CVE-2022-47361

In firewall service, there is a missing permission check. This could lead to local escalation of privilege with system execution privileges needed...

CVE-2022-47347

In engineermode services, there is a missing permission check. This could lead to local denial of service in engineermode services...

CVE-2022-47360

In log service, there is a missing permission check. This could lead to local denial of service in log service...

CVE-2022-47357

In log service, there is a missing permission check. This could lead to local denial of service in log service...

CVE-2022-47359

In log service, there is a missing permission check. This could lead to local denial of service in log service...

CVE-2022-47356

In log service, there is a missing permission check. This could lead to local denial of service in log service...

CVE-2022-47348

In engineermode services, there is a missing permission check. This could lead to local denial of service in engineermode services...

CVE-2022-47355

In log service, there is a missing permission check. This could lead to local denial of service in log service...

CVE-2022-47356

In log service, there is a missing permission check. This could lead to local denial of service in log service...