318 matches found
CVE-2022-25192
A cross-site request forgery CSRF vulnerability in Jenkins Snow Commander Plugin 1.10 and earlier allows attackers to connect to an attacker-specified webserver using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins...
Cross site request forgery (csrf)
A cross-site request forgery CSRF vulnerability in Jenkins Snow Commander Plugin 1.10 and earlier allows attackers to connect to an attacker-specified webserver using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins...
Design/Logic Flaw
Missing permission checks in Jenkins Snow Commander Plugin 1.10 and earlier allow attackers with Overall/Read permission to connect to an attacker-specified webserver using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins...
CVE-2022-25193
CVE-2022-25193 (Snow Commander Plugin) : Jenkins Snow Commander Plugin ≤ 2.0 allows missing permission checks in form-validation methods. An attacker with Overall/Read permission can cause the plugin to connect to an attacker-specified webserver using attacker-specified credential IDs, enabling c...
CVE-2022-25193
Missing permission checks in Jenkins Snow Commander Plugin 1.10 and earlier allow attackers with Overall/Read permission to connect to an attacker-specified webserver using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins...
CVE-2022-25192
A cross-site request forgery CSRF vulnerability in Jenkins Snow Commander Plugin 1.10 and earlier allows attackers to connect to an attacker-specified webserver using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins...
CVE-2022-25192
CVE-2022-25192 concerns Jenkins Snow Commander Plugin. Affected versions: 1.10 and earlier (and references to 2.0 in the same advisory family). Vulnerability class: CSRF and improper permission checks in form validation that enables an attacker with certain Jenkins permissions to cause the plugin...
PT-2022-17133 · Jenkins · Jenkins Snow Commander Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Snow Commander Plugin versions 1.10 and earlier Description: The issue concerns missing permission checks in the Jenkins Snow Commander Plugin, allowing attackers with Overall/Read permission to connect to a specified webserver using...
PT-2022-17132 · Jenkins · Jenkins Snow Commander Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Snow Commander Plugin versions 2.0 and earlier Description: A cross-site request forgery CSRF issue allows attackers to connect to an attacker-specified webserver using attacker-specified credentials IDs, potentially capturing...
Jenkins Snow Commander Plugin 跨站请求伪造漏洞
Jenkins is a Jenkins open source application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins Snow Commander Plugin 2.0 and earlier versions contain a cross-site request forgery vulnerability that stems from a...
Jenkins Plugin Snow Commander 权限许可和访问控制问题漏洞
Jenkins is a Jenkins open source application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Snow Commander Plugin 2.0 and earlier versions are vulnerable to an access control error that stems from not...
Heartland OA2021 Winter Snow Edition suffers from a logic flaw vulnerability (CNVD-2022-13942)
Heartland OA is developed based on the SaaS architecture of cloud computing model to meet the needs of government cloud, industrial cloud, education cloud and other intelligent cloud platform construction. A logic flaw vulnerability exists in Heartland OA2021 Winter Snow Edition, which can be...
Fixed vulnerability in Snow Inventory Agent for Windows
A vulnerability has been fixed in Snow Inventory Agent for Windows. The vulnerability allows a locally authenticated malicious person able to manipulate data. Snow Globe has released updates to fix the vulnerability. fix. More information can be found on the page below:...
CVE-2021-41562
A vulnerability in Snow Snow Agent for Windows allows a non-admin user to cause arbitrary deletion of files. This issue affects: Snow Snow Agent for Windows version 5.0.0 to 6.7.1 on Windows...
CVE-2021-41562
A vulnerability in Snow Snow Agent for Windows allows a non-admin user to cause arbitrary deletion of files. This issue affects: Snow Snow Agent for Windows version 5.0.0 to 6.7.1 on Windows...
Arbitrary file deletion
A vulnerability in Snow Snow Agent for Windows allows a non-admin user to cause arbitrary deletion of files. This issue affects: Snow Snow Agent for Windows version 5.0.0 to 6.7.1 on Windows...
CVE-2021-41562 Deletion of arbitrary files vulnerability in Snow Agent for Windows
A vulnerability in Snow Snow Agent for Windows allows a non-admin user to cause arbitrary deletion of files. This issue affects: Snow Snow Agent for Windows version 5.0.0 to 6.7.1 on Windows...
CVE-2021-41562
CVE-2021-41562 affects Snow Snow Agent for Windows (versions 5.0.0–6.7.1). A local, non-admin user can cause arbitrary file deletion due to insufficient access restrictions. CVSS-3.1 vector: AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H (base score 6.1, MEDIUM). NVD CVSS2: 3.6 (PARTIAL I, PARTIAL A). Impac...
Snow Software AB Snow Agent 安全漏洞
Snow Software AB Snow Agent is part of Snow Software AB's Snow Inventory solution, an automatic update component of the software designed to download and apply updates when new versions are released. A security vulnerability exists in Snow Agent for Windows versions 5.0.0 through 6.7.1, which ste...
snow-boots.com Cross Site Scripting vulnerability OBB-2135271
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...