Lucene search
+L

626 matches found

NVD
NVD
added 2022/08/10 4:15 p.m.24 views

CVE-2022-38133

In JetBrains TeamCity before 2022.04.3 the private SSH key could be written to the server log in some cases...

5.3CVSS0.00429EPSS
SaveExploits0References1
Prion
Prion
added 2022/08/10 4:15 p.m.19 views

Design/Logic Flaw

In JetBrains TeamCity before 2022.04.3 the private SSH key could be written to the server log in some cases...

5CVSS5.2AI score0.00429EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/08/10 3:25 p.m.30 views

CVE-2022-38133

In JetBrains TeamCity before 2022.04.3 the private SSH key could be written to the server log in some cases...

3.2CVSS5.5AI score0.00429EPSS
SaveExploits0References1
OSV
OSV
added 2022/07/28 12:0 a.m.64 views

GHSA-78FG-PVGG-6G3R Missing permission check in Jenkins OpenShift Deployer Plugin

OpenShift Deployer Plugin 1.2.0 and earlier does not perform permission checks in methods implementing form validation. This allows attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system and to upload a SSH key fi...

5.4CVSS6.6AI score0.00759EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2022/07/28 12:0 a.m.34 views

Missing permission check in Jenkins OpenShift Deployer Plugin

OpenShift Deployer Plugin 1.2.0 and earlier does not perform permission checks in methods implementing form validation. This allows attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system and to upload a SSH key fi...

6.5CVSS6.6AI score0.00759EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2022/07/27 3:15 p.m.23 views

CVE-2022-36909

A missing permission check in Jenkins OpenShift Deployer Plugin 1.2.0 and earlier allows attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system and to upload a SSH key file from the Jenkins controller file system ...

6.5CVSS6.4AI score
SaveExploits0References2
NVD
NVD
added 2022/07/27 3:15 p.m.40 views

CVE-2022-36908

A cross-site request forgery CSRF vulnerability in Jenkins OpenShift Deployer Plugin 1.2.0 and earlier allows attackers to check for the existence of an attacker-specified file path on the Jenkins controller file system and to upload a SSH key file from the Jenkins controller file system to an...

6.5CVSS0.00521EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/07/27 3:15 p.m.5 views

CVE-2022-36909

A missing permission check in Jenkins OpenShift Deployer Plugin 1.2.0 and earlier allows attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system and to upload a SSH key file from the Jenkins controller file system ...

6.5CVSS5.8AI score0.00759EPSS
SaveExploits0References4
OSV
OSV
added 2022/07/27 3:15 p.m.26 views

CVE-2022-36908

A cross-site request forgery CSRF vulnerability in Jenkins OpenShift Deployer Plugin 1.2.0 and earlier allows attackers to check for the existence of an attacker-specified file path on the Jenkins controller file system and to upload a SSH key file from the Jenkins controller file system to an...

6.5CVSS6.6AI score
SaveExploits0References2
NVD
NVD
added 2022/07/27 3:15 p.m.33 views

CVE-2022-36909

A missing permission check in Jenkins OpenShift Deployer Plugin 1.2.0 and earlier allows attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system and to upload a SSH key file from the Jenkins controller file system ...

6.5CVSS0.00759EPSS
SaveExploits0References2
Prion
Prion
added 2022/07/27 3:15 p.m.18 views

Design/Logic Flaw

A missing permission check in Jenkins OpenShift Deployer Plugin 1.2.0 and earlier allows attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system and to upload a SSH key file from the Jenkins controller file system ...

4CVSS6.3AI score0.00759EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2022/07/27 3:15 p.m.26 views

Cross site request forgery (csrf)

A cross-site request forgery CSRF vulnerability in Jenkins OpenShift Deployer Plugin 1.2.0 and earlier allows attackers to check for the existence of an attacker-specified file path on the Jenkins controller file system and to upload a SSH key file from the Jenkins controller file system to an...

4.3CVSS6.5AI score0.00521EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2022/07/27 2:26 p.m.39 views

CVE-2022-36909

A missing permission check in Jenkins OpenShift Deployer Plugin 1.2.0 and earlier allows attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system and to upload a SSH key file from the Jenkins controller file system ...

6.9AI score0.00759EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2022/07/27 2:26 p.m.43 views

CVE-2022-36908

A cross-site request forgery CSRF vulnerability in Jenkins OpenShift Deployer Plugin 1.2.0 and earlier allows attackers to check for the existence of an attacker-specified file path on the Jenkins controller file system and to upload a SSH key file from the Jenkins controller file system to an...

7.1AI score0.00521EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/07/27 12:0 a.m.7 views

Jenkins OpenShift Deployer Plugin 安全漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

6.5CVSS6.6AI score0.00759EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2022/07/27 12:0 a.m.8 views

PT-2022-5099 · Jenkins · Jenkins Openshift Deployer Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins OpenShift Deployer Plugin versions 1.2.0 and earlier Description: A missing permission check in the Jenkins OpenShift Deployer Plugin allows attackers with Overall/Read permission to check for the existence of an attacker-specified fi...

6.5CVSS6.3AI score0.00759EPSS
SaveExploits0References10
CNNVD
CNNVD
added 2022/07/27 12:0 a.m.10 views

Jenkins OpenShift Deployer Plugin 跨站请求伪造漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A cross-site request...

6.5CVSS6.4AI score0.00521EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2022/07/27 12:0 a.m.10 views

PT-2022-4767 · Jenkins · Jenkins Openshift Deployer Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins OpenShift Deployer Plugin versions 1.2.0 and earlier Description: A cross-site request forgery CSRF vulnerability allows attackers to check for the existence of an attacker-specified file path on the Jenkins controller file system and...

6.5CVSS6.6AI score0.00521EPSS
SaveExploits0References10
NVD
NVD
added 2022/07/20 1:15 p.m.30 views

CVE-2022-36321

In JetBrains TeamCity before 2022.04.2 the private SSH key could be written to the build log in some cases...

6.5CVSS0.01786EPSS
SaveExploits0References1
Prion
Prion
added 2022/07/20 1:15 p.m.22 views

Design/Logic Flaw

In JetBrains TeamCity before 2022.04.2 the private SSH key could be written to the build log in some cases...

4CVSS6.4AI score0.01786EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder