CVE-2022-33736

CVE-2022-33736 affects Siemens Opcenter Quality: authentication bypass due to incorrect validation during login. Affected products are Opcenter Quality V13.1 (all versions before 13.1.20220624) and V13.2 (all versions before 13.2.20220624). The root cause is improper authentication handling that ...

PT-2022-21852 · Siemens · Opcenter Quality

Name of the Vulnerable Software and Affected Versions: Opcenter Quality versions prior to V13.1.20220624 Opcenter Quality versions prior to V13.2.20220624 Description: A vulnerability has been identified where the affected applications do not properly validate login information during...

July 12, 2022 Servicing stack update (KB5015894)

None None...

Siemens Opcenter Quality 授权问题漏洞

Opcenter Quality is a quality management system QMS that enables organizations to protect compliance, optimize quality, reduce defects and rework costs, and achieve operational excellence by improving process stability.An authentication bypass vulnerability exists in Siemens Opcenter Quality, whi...

Siemens Opcenter Quality

1. EXECUTIVE SUMMARY CVSS v3 9.6 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: Opcenter Quality Vulnerability: Incorrect Implementation of Authentication Algorithm. 2. RISK EVALUATION Successful exploitation of this vulnerability could allow unauthenticated...

[SECURITY] Fedora 36 Update: mingw-wavpack-5.4.0-5.fc36

WavPack is a completely open audio compression format providing lossless, high-quality lossy, and a unique hybrid compression mode. Although the technology is loosely based on previous versions of WavPack, the new version 4 format has been designed from the ground up to offer unparalleled...

CVE-2022-32030

Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the list parameter in the function formSetQosBand...

CVE-2022-34810

A missing check in Jenkins RQM Plugin 2.8 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...

PT-2022-22362 · Jenkins · Jenkins Rqm Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins RQM Plugin versions 2.8 and earlier Description: A missing check in the Jenkins RQM Plugin allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins. This can be done through an HTTP...

June 23, 2022 Servicing stack update (KB5014798)

None None...

June 20, 2022—KB5016139 (OS Builds 19042.1767, 19043.1767, and 19044.1767) Out-of-band

None None...

June 20, 2022—KB5016138 (OS Build 22000.740) Out-of-band

None None...

June 14, 2022—KB5014699 (OS Builds 19042.1766, 19043.1766, and 19044.1766)

None None...

May 10, 2022—KB5013945 (OS Build 18363.2274)

None None...

May 10, 2022—KB5013943 (OS Build 22000.675)

None None...

June 14, 2022—KB5014697 (OS Build 22000.739)

None None...

Password stored in plain text by Jenkins HP ALM Quality Center Plugin

HP ALM Quality Center Plugin 1.6 and earlier stores a password in plain text in its global configuration file org.jenkinsci.plugins.qc.QualityCenterIntegrationRecorder.xml. This password can be viewed by users with access to the Jenkins controller file system...

GHSA-FC3J-CFQV-PFRM Password stored in plain text by Jenkins HP ALM Quality Center Plugin

HP ALM Quality Center Plugin 1.6 and earlier stores a password in plain text in its global configuration file org.jenkinsci.plugins.qc.QualityCenterIntegrationRecorder.xml. This password can be viewed by users with access to the Jenkins controller file system...

Jenkins Sonar Quality Gates Plugin transmits credentials in plain text during configuration

Sonar Quality Gates Plugin stores credentials in its global configuration file org.quality.gates.jenkins.plugin.GlobalConfig.xml on the Jenkins controller as part of its configuration. While the credentials are stored encrypted on disk, they are transmitted in plain text as part of the...

Jenkins Quality Gates Plugin transmits credentials in plain text during configuration

Quality Gates Plugin stores credentials in its global configuration file quality.gates.jenkins.plugin.GlobalConfig.xml on the Jenkins controller as part of its configuration. While the credentials are stored encrypted on disk, they are transmitted in plain text as part of the configuration form b...