EUVD-2022-4539

Malicious code in bioql PyPI...

SUSE CVE-2020-2239

Jenkins Parameterized Remote Trigger Plugin 3.1.3 and earlier stores a secret unencrypted in its global configuration file on the Jenkins controller where it can be viewed by attackers with access to the Jenkins controller file system...

no.twingine.hudson:greenballs (>=1.1, <=1.2), org.jvnet.hudson.main:hudson-test-harness (1.287) +9 more potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.287)

org.jvnet.hudson.main:hudson-core MAVEN version 1.287 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - no.twingine.hudson:greenballs =1.1, =1.3, =1.0, =1.2, =1.3 - org.jvnet.hudson.plugins:plugin...

GHSA-MC22-25R3-2W9W Parameterized Trigger Plugin fails to check Item/Build permission

Parameterized Trigger Plugin fails to check Item/Build permission: The Parameterized Trigger Plugin did not check the build authentication it was running as and allowed triggering any other project in Jenkins. The plugin has been adapted to now check for Item/Build permission before triggering a...

Parameterized Trigger Plugin fails to check Item/Build permission

Parameterized Trigger Plugin fails to check Item/Build permission: The Parameterized Trigger Plugin did not check the build authentication it was running as and allowed triggering any other project in Jenkins. The plugin has been adapted to now check for Item/Build permission before triggering a...

org.jenkins-ci.plugins:build-pipeline-plugin (>=1.3.4.1, <=1.5.8), org.jenkins-ci.plugins:buildgraph-view (>=1.3.1, <=1.8) +8 more potentially affected by CVE-2017-1000084 via org.jenkins-ci.plugins:parameterized-trigger (>=2.12, <=2.33)

org.jenkins-ci.plugins:parameterized-trigger MAVEN version =2.12, =1.3.4.1, =1.3.1, =1.0, =1.9, =1.02, =1.0, =0.8.0, =0.16, =1.1, =0.6.6, =1.1.1 Source cves: CVE-2017-1000084 Source advisory: OSV:GHSA-MC22-25R3-2W9W...

org.jenkins-ci.plugins:build-pipeline-plugin (>=1.3.4.1, <=1.5.8), org.jenkins-ci.plugins:buildgraph-view (>=1.3.1, <=1.8) +8 more potentially affected by CVE-2017-1000084 via org.jenkins-ci.plugins:parameterized-trigger (>=2.12, <=2.33)

org.jenkins-ci.plugins:parameterized-trigger MAVEN version =2.12, =1.3.4.1, =1.3.1, =1.0, =1.9, =1.02, =1.0, =0.8.0, =0.16, =1.1, =0.6.6, =1.1.1 Source cves: CVE-2017-1000084 Source advisory: GHSA-MC22-25R3-2W9W...

CVE-2022-27195

Jenkins Parameterized Trigger Plugin 2.43 and earlier captures environment variables passed to builds triggered using Jenkins Parameterized Trigger Plugin, including password parameter values, in their build.xml files. These values are stored unencrypted and can be viewed by users with access to...

Jenkins Parameterized Trigger Plugin Information Disclosure Vulnerability

Jenkins and Jenkins Plugin are both Jenkins open source products. jenkins is an application. Jenkins Plugin is an application that provides hundreds of plugins to support building, deploying, and automating any project. These values are stored and can be viewed by an attacker with access to the...

Sensitive parameter values captured in build metadata files by Jenkins Parameterized Trigger Plugin

Jenkins Parameterized Trigger Plugin 2.43 and earlier captures environment variables passed to builds triggered using Jenkins Parameterized Trigger Plugin, including password parameter values, in their build.xml files. These values are stored unencrypted and can be viewed by users with access to...

GHSA-5MPF-HW8F-86W9 Sensitive parameter values captured in build metadata files by Jenkins Parameterized Trigger Plugin

Jenkins Parameterized Trigger Plugin 2.43 and earlier captures environment variables passed to builds triggered using Jenkins Parameterized Trigger Plugin, including password parameter values, in their build.xml files. These values are stored unencrypted and can be viewed by users with access to...

org.jenkins-ci.plugins:build-pipeline-plugin (>=1.3.4.1, <=1.5.8), org.jenkins-ci.plugins:buildgraph-view (>=1.3.1, <=1.8) +8 more potentially affected by CVE-2022-27195 via org.jenkins-ci.plugins:parameterized-trigger (>=2.12, <=2.33)

org.jenkins-ci.plugins:parameterized-trigger MAVEN version =2.12, =1.3.4.1, =1.3.1, =1.0, =1.9, =1.02, =1.0, =0.8.0, =0.16, =1.1, =0.6.6, =1.1.1 Source cves: CVE-2022-27195 Source advisory: OSV:GHSA-5MPF-HW8F-86W9...

org.jenkins-ci.plugins:build-pipeline-plugin (>=1.3.4.1, <=1.5.8), org.jenkins-ci.plugins:buildgraph-view (>=1.3.1, <=1.8) +8 more potentially affected by CVE-2022-27195 via org.jenkins-ci.plugins:parameterized-trigger (>=2.12, <=2.33)

org.jenkins-ci.plugins:parameterized-trigger MAVEN version =2.12, =1.3.4.1, =1.3.1, =1.0, =1.9, =1.02, =1.0, =0.8.0, =0.16, =1.1, =0.6.6, =1.1.1 Source cves: CVE-2022-27195 Source advisory: GHSA-5MPF-HW8F-86W9...

CVE-2022-27195

Jenkins Parameterized Trigger Plugin 2.43 and earlier captures environment variables passed to builds triggered using Jenkins Parameterized Trigger Plugin, including password parameter values, in their build.xml files. These values are stored unencrypted and can be viewed by users with access to...

CVE-2022-27195

Jenkins Parameterized Trigger Plugin 2.43 and earlier captures environment variables passed to builds triggered using Jenkins Parameterized Trigger Plugin, including password parameter values, in their build.xml files. These values are stored unencrypted and can be viewed by users with access to...

CVE-2022-27195

Jenkins Parameterized Trigger Plugin 2.43 and earlier captures environment variables passed to builds triggered using Jenkins Parameterized Trigger Plugin, including password parameter values, in their build.xml files. These values are stored unencrypted and can be viewed by users with access to...

Design/Logic Flaw

Jenkins Parameterized Trigger Plugin 2.43 and earlier captures environment variables passed to builds triggered using Jenkins Parameterized Trigger Plugin, including password parameter values, in their build.xml files. These values are stored unencrypted and can be viewed by users with access to...

CVE-2022-27195

Jenkins Parameterized Trigger Plugin 2.43 and earlier captures environment variables passed to builds triggered using Jenkins Parameterized Trigger Plugin, including password parameter values, in their build.xml files. These values are stored unencrypted and can be viewed by users with access to...

CVE-2022-27195

CVE-2022-27195 affects Jenkins Parameterized Trigger Plugin (versions 2.43 and earlier). The vulnerability arises from the plugin capturing environment variables passed to builds triggered by the plugin, including password parameter values, and storing them unencrypted in build.xml files. These s...

CVE-2022-27195

Jenkins Parameterized Trigger Plugin 2.43 and earlier captures environment variables passed to builds triggered using Jenkins Parameterized Trigger Plugin, including password parameter values, in their build.xml files. These values are stored unencrypted and can be viewed by users with access to...