Lucene search
K

9 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 11:4 p.m.6 views

CVE-2022-34808

Jenkins Cisco Spark Plugin 1.1.1 and earlier stores bearer tokens unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system...

4.3CVSS6.7AI score0.00335EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2023/06/05 12:0 a.m.2 views

The vulnerability of the Jenkins Cisco Spark Plugin, related to the storage of passwords in an unencrypted form, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Jenkins Cisco Spark Plugin is related to the storage of passwords in an unencrypted form in the configuration file org.jenkinsci.plugins.spark.SparkNotifier.xml. Exploiting this vulnerability could allow a remote attacker to gain unauthorized access to protected informati...

5CVSS5.5AI score0.00335EPSS
Exploits0References2Affected Software1
CNVD
CNVD
added 2022/07/04 12:0 a.m.18 views

Jenkins Cisco Spark Plugin信息泄露漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products. jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application.An information disclosure vulnerability...

4.3CVSS0.8AI score0.00335EPSS
Exploits0References1
OSV
OSV
added 2022/06/30 6:15 p.m.2 views

CVE-2022-34808

Jenkins Cisco Spark Plugin 1.1.1 and earlier stores bearer tokens unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system...

4.3CVSS5.8AI score0.00335EPSS
Exploits0References1
NVD
NVD
added 2022/06/30 6:15 p.m.11 views

CVE-2022-34808

Jenkins Cisco Spark Plugin 1.1.1 and earlier stores bearer tokens unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system...

4.3CVSS0.00335EPSS
Exploits0References1
Cvelist
Cvelist
added 2022/06/30 5:48 p.m.11 views

CVE-2022-34808

Jenkins Cisco Spark Plugin 1.1.1 and earlier stores bearer tokens unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system...

5.2AI score0.00335EPSS
Exploits0References1
CVE
CVE
added 2022/06/30 5:48 p.m.251 views

CVE-2022-34808

CVE-2022-34808 : Jenkins Cisco Spark Plugin 1.1.1 and earlier stores bearer tokens unencrypted in its global configuration file on the Jenkins controller, allowing users with file-system access to view sensitive credentials. Root cause is unencrypted storage of tokens in the SparkNotifier.xml/fil...

4.3CVSS4.8AI score0.00335EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2022/06/30 12:0 a.m.1 views

PT-2022-6642 · Cisco +1 · Jenkins Cisco Spark Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Cisco Spark Plugin versions 1.1.1 and earlier Description: The issue is related to the storage of bearer tokens in an unencrypted form in the global configuration file org.jenkinsci.plugins.spark.SparkNotifier.xml on the Jenkins...

5CVSS4.5AI score0.00335EPSS
Exploits0References5
CNNVD
CNNVD
added 2022/06/30 12:0 a.m.2 views

Jenkins Plugin Cisco Spark 安全漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products. jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application.An information disclosure vulnerability...

4.3CVSS5.6AI score0.00335EPSS
Exploits0References5
Rows per page
Query Builder