Lucene search
K

6 matches found

Github Security Blog
Github Security Blog
added 2022/05/13 1:48 a.m.10 views

CSRF vulnerability and missing permission checks in Openstack Cloud Plugin allowed capturing credentials

A exposure of sensitive information vulnerability exists in Jenkins Openstack Cloud Plugin 2.35 and earlier in BootSource.java, InstancesToRun.java, JCloudsCleanupThread.java, JCloudsCloud.java, JCloudsComputer.java, JCloudsPreCreationThread.java, JCloudsRetentionStrategy.java, JCloudsSlave.java,...

8.8CVSS6.3AI score0.00107EPSS
Exploits0References5Affected Software1
CNVD
CNVD
added 2018/07/09 12:0 a.m.2 views

CloudBees Jenkins Openstack Cloud Plugin Information Disclosure Vulnerability

CloudBees Jenkins formerly known as Hudson Labs is a set of Java-based continuous integration tools from CloudBees, Inc. that are used to monitor order repetitive work.Openstack Cloud Plugin is a plugin for creating Openstack cloud instances using one of the ... CloudBees Jenkins An information...

8.8CVSS8.3AI score0.00107EPSS
Exploits0References1
Prion
Prion
added 2018/06/26 5:29 p.m.13 views

Design/Logic Flaw

A exposure of sensitive information vulnerability exists in Jenkins Openstack Cloud Plugin 2.35 and earlier in BootSource.java, InstancesToRun.java, JCloudsCleanupThread.java, JCloudsCloud.java, JCloudsComputer.java, JCloudsPreCreationThread.java, JCloudsRetentionStrategy.java, JCloudsSlave.java,...

4CVSS8.4AI score0.00107EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2018/06/26 5:29 p.m.9 views

CVE-2018-1000603

A exposure of sensitive information vulnerability exists in Jenkins Openstack Cloud Plugin 2.35 and earlier in BootSource.java, InstancesToRun.java, JCloudsCleanupThread.java, JCloudsCloud.java, JCloudsComputer.java, JCloudsPreCreationThread.java, JCloudsRetentionStrategy.java, JCloudsSlave.java,...

8.8CVSS8.5AI score
Exploits0References1
NVD
NVD
added 2018/06/26 5:29 p.m.8 views

CVE-2018-1000603

A exposure of sensitive information vulnerability exists in Jenkins Openstack Cloud Plugin 2.35 and earlier in BootSource.java, InstancesToRun.java, JCloudsCleanupThread.java, JCloudsCloud.java, JCloudsComputer.java, JCloudsPreCreationThread.java, JCloudsRetentionStrategy.java, JCloudsSlave.java,...

8.8CVSS8.5AI score0.00107EPSS
Exploits0References1
CVE
CVE
added 2018/06/26 5:0 p.m.39 views

CVE-2018-1000603

Summary (CVE-2018-1000603): Affected product: Jenkins Openstack Cloud Plugin (versions 2.35 and earlier). The vulnerability arises in multiple OpenStack-related classes (e.g., BootSource.java, OpenstackCredentials.java, SlaveOptions.java, etc.) and allows attackers with Overall/Read access to Jen...

8.8CVSS8.4AI score0.00107EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder