375 matches found
CloudBees Jenkins P4 plugin cross-site request forgery vulnerability
CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version of the release/test project and some timed tasks . P4 Plugin is used in one of the Perforce...
CVE-2020-2141
A cross-site request forgery vulnerability in Jenkins P4 Plugin 1.10.10 and earlier allows attackers to trigger builds or add a labels in Perforce...
CVE-2020-2141
A cross-site request forgery vulnerability in Jenkins P4 Plugin 1.10.10 and earlier allows attackers to trigger builds or add a labels in Perforce...
Cross site request forgery (csrf)
A cross-site request forgery vulnerability in Jenkins P4 Plugin 1.10.10 and earlier allows attackers to trigger builds or add a labels in Perforce...
CVE-2020-2141
A cross-site request forgery vulnerability in Jenkins P4 Plugin 1.10.10 and earlier allows attackers to trigger builds or add a labels in Perforce...
CVE-2020-2141
Jenkins P4 Plugin ≤1.10.10 is affected by a cross-site request forgery vulnerability that lets an attacker trigger builds or add labels in Perforce. Root cause: the web app does not adequately validate request origin. Impact: CSRF with I=Low, UI interaction required; no confidentiality or availab...
PT-2020-15352 · Jenkins · Jenkins P4 Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins P4 Plugin versions 1.10.10 and earlier Description: A cross-site request forgery issue allows attackers to trigger builds or add labels in Perforce. Recommendations: For Jenkins P4 Plugin versions 1.10.10 and earlier, update to a...
CVE-2020-2141: Cross-Site Request Forgery (CSRF)
A cross-site request forgery vulnerability in Jenkins P4 Plugin 1.10.10 and earlier allows attackers to trigger builds or add a labels in Perforce...
Perforce P4web Cross-Site Scripting Vulnerability (CNVD-2020-13886)
Perforce is a version control software and Perforce P4web is a client software. A cross-site scripting vulnerability exists in Perforce P4web versions 2011.1 and 2012.1. The vulnerability stems from a failure of the web application to properly validate client-side data. An attacker could exploit...
CVE-2013-1410
Perforce P4web 2011.1 and 2012.1 has multiple XSS vulnerabilities...
Cross site scripting
Perforce P4web 2011.1 and 2012.1 has multiple XSS vulnerabilities...
CVE-2013-1410
Perforce P4web 2011.1 and 2012.1 has multiple XSS vulnerabilities...
CVE-2013-1410
CVE-2013-1410 corresponds to multiple XSS vulnerabilities in Perforce P4web, affecting version 2011.1 and 2012.1. The included documents describe an issue where the web application fails to properly validate client-side data, enabling cross-site scripting. Public scoring from NVD indicates CVSS v...
CVE-2013-1410: Improper Neutralization of Input During Web Page Generation
Perforce P4web 2011.1 and 2012.1 has multiple XSS vulnerabilities...
Sensitive Information Leakage
Jenkins perforce plugin is vulnerable to sensitive information leakage. It does not properly secure the credentials because PerforcePasswordEncryptor.java. uses DES and an encryption key stored in its public source code, allowing unauthorized users to get the Perforce passwords configured in jobs...
Design/Logic Flaw
An exposure of sensitive information vulnerability exists in Jenkins Perforce Plugin version 1.3.36 and older in PerforcePasswordEncryptor.java that allows attackers with insufficient permission to obtain Perforce passwords configured in jobs to obtain them...
CVE-2018-1000145
An exposure of sensitive information vulnerability exists in Jenkins Perforce Plugin version 1.3.36 and older in PerforcePasswordEncryptor.java that allows attackers with local file system access to obtain encrypted Perforce passwords and decrypt them...
Information disclosure
An exposure of sensitive information vulnerability exists in Jenkins Perforce Plugin version 1.3.36 and older in PerforcePasswordEncryptor.java that allows attackers with local file system access to obtain encrypted Perforce passwords and decrypt them...
CVE-2018-1000147
An exposure of sensitive information vulnerability exists in Jenkins Perforce Plugin version 1.3.36 and older in PerforcePasswordEncryptor.java that allows attackers with insufficient permission to obtain Perforce passwords configured in jobs to obtain them...
CVE-2018-1000147
An exposure of sensitive information vulnerability exists in Jenkins Perforce Plugin version 1.3.36 and older in PerforcePasswordEncryptor.java that allows attackers with insufficient permission to obtain Perforce passwords configured in jobs to obtain them...