EUVD-2022-2512

Malicious code in bioql PyPI...

Jenkins Aqua Security Serverless Scanner Plugin showed plain text password in job configuration form fields

Jenkins Aqua Security Serverless Scanner Plugin 1.0.4 and earlier transmitted configured passwords in plain text as part of job configuration forms, potentially resulting in their exposure...

Code injection

Jenkins Aqua Security Serverless Scanner Plugin 1.0.4 and earlier transmitted configured passwords in plain text as part of job configuration forms, potentially resulting in their exposure...

CVE-2019-10397

Jenkins Aqua Security Serverless Scanner Plugin 1.0.4 and earlier transmitted configured passwords in plain text as part of job configuration forms, potentially resulting in their exposure...

CVE-2019-10397

The CVE-2019-10397 entry concerns the Jenkins Aqua Security Serverless Scanner Plugin, affecting version 1.0.4 and earlier. The root issue is that configured passwords were transmitted in plain text as part of job configuration forms, potentially exposing credentials. Publicly available connected...