Lucene search
+L

113 matches found

vulnersOsv
vulnersOsv
•added 2022/05/13 1:01 a.m.•0 views

org.jenkins-ci.main:jenkins-test-harness (1.598), org.jenkins-ci.main:jenkins-war (1.598) +3 more potentially affected by CVE-2018-1999001 via org.jenkins-ci.main:jenkins-core (1.598)

org.jenkins-ci.main:jenkins-core MAVEN version 1.598 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.598 - org.jenkins-ci.main:jenkins-war 1.598 -...

8.8CVSS0.18116EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2022/05/13 1:00 a.m.•1 views

org.jenkins-ci.main:jenkins-test-harness (1.598), org.jenkins-ci.main:jenkins-war (1.598) +3 more potentially affected by CVE-2018-1999003 via org.jenkins-ci.main:jenkins-core (1.598)

org.jenkins-ci.main:jenkins-core MAVEN version 1.598 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.598 - org.jenkins-ci.main:jenkins-war 1.598 -...

4.3CVSS0.00759EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2022/01/21 11:37 p.m.•2 views

org.jenkins-ci.main:jenkins-test-harness (1.598), org.jenkins-ci.main:jenkins-war (1.598) +3 more potentially affected by CVE-2022-20612 via org.jenkins-ci.main:jenkins-core (1.598)

org.jenkins-ci.main:jenkins-core MAVEN version 1.598 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.598 - org.jenkins-ci.main:jenkins-war 1.598 -...

4.3CVSS0.01813EPSS
SaveExploits0
CNVD
CNVD
•added 2020/07/03 12:00 a.m.•21 views

Unspecified Vulnerability in CloudBees Jenkins TestComplete support Plugin

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software release/testing projects and some timed tasks . TestComplete support Plugin is used in one of the un...

4.3CVSS6.6AI score0.00691EPSS
SaveExploits0
osv_cve
osv_cve
•added 2020/07/02 3:15 p.m.•36 views

CVE-2020-2209

Jenkins TestComplete support Plugin 2.4.1 and earlier stores a password unencrypted in job config.xml files on the Jenkins master where it can be viewed by users with Extended Read permission, or access to the master file system...

4.3CVSS6.8AI score
SaveExploits0References2
NVD
NVD
•added 2020/07/02 3:15 p.m.•50 views

CVE-2020-2209

Jenkins TestComplete support Plugin 2.4.1 and earlier stores a password unencrypted in job config.xml files on the Jenkins master where it can be viewed by users with Extended Read permission, or access to the master file system...

4.3CVSS0.00691EPSS
SaveExploits0References2
Prion
Prion
•added 2020/07/02 3:15 p.m.•36 views

Design/Logic Flaw

Jenkins TestComplete support Plugin 2.4.1 and earlier stores a password unencrypted in job config.xml files on the Jenkins master where it can be viewed by users with Extended Read permission, or access to the master file system...

4CVSS4.6AI score0.00691EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2020/07/02 2:55 p.m.•118 views

CVE-2020-2209

CVE-2020-2209 affects CloudBees Jenkins TestComplete support Plugin versions 2.4.1 and earlier. The issue stems from storing passwords unencrypted in job config.xml on the Jenkins master, allowing access by users with Extended Read permission or direct master filesystem access. Remediation per mu...

4.3CVSS4.6AI score0.00691EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2020/07/02 2:55 p.m.•55 views

CVE-2020-2209

Jenkins TestComplete support Plugin 2.4.1 and earlier stores a password unencrypted in job config.xml files on the Jenkins master where it can be viewed by users with Extended Read permission, or access to the master file system...

4.6AI score0.00691EPSS
SaveExploits0References2
Mend
Mend
•added 2020/07/02 2:55 p.m.•8 views

CVE-2020-2209

Jenkins TestComplete support Plugin 2.4.1 and earlier stores a password unencrypted in job config.xml files on the Jenkins master where it can be viewed by users with Extended Read permission, or access to the master file system...

5.3CVSS0.00691EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2020/07/02 12:00 a.m.•35 views

PT-2020-15424 · Jenkins · Jenkins Testcomplete Support Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins TestComplete support Plugin versions 2.4.1 and earlier Description: The issue allows storage of a password unencrypted in job config.xml files on the Jenkins master. This can be viewed by users with Extended Read permission or access ...

4.3CVSS4.5AI score0.00691EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/07/02 12:00 a.m.•10 views

CVE-2020-2209: Insufficiently Protected Credentials

Jenkins TestComplete support Plugin 2.4.1 and earlier stores a password unencrypted in job config.xml files on the Jenkins master where it can be viewed by users with Extended Read permission, or access to the master file system...

4.3CVSS5.8AI score0.00691EPSS
SaveExploits0References2
Jenkins Security Advisories
Jenkins Security Advisories
•added 2020/07/02 12:00 a.m.•26 views

Password stored in plain text by TestComplete

TestComplete 2.4.1 and earlier stores a password unencrypted in job config.xml files as part of its configuration. This password can be viewed by users with Extended Read permission or access to the Jenkins controller file system. As of publication of this advisory, there is no fix...

4.3CVSS5.1AI score0.00691EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder