5817 matches found
CVE-2020-2124
CVE-2020-2124 affects Jenkins Dynamic Extended Choice Parameter Plugin (versions ≤ 1.0.1). The vulnerability: passwords are stored unencrypted in job config.xml files on the Jenkins master, allowing access by users with Extended Read permission or master FS access. Impact is exposure of stored cr...
PT-2020-15341 · Jenkins · Jenkins Parasoft Environment Manager Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Parasoft Environment Manager Plugin versions 2.14 and earlier Description: The issue allows unauthorized access to unencrypted passwords stored in job config.xml files on the Jenkins master. Users with Extended Read permission or acce...
PT-2020-15339 · Jenkins · Jenkins Harvest Scm Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Harvest SCM Plugin versions 0.5.1 and earlier Description: The issue concerns the storage of passwords in an unencrypted manner within the global configuration file on the Jenkins master. This allows users with access to the master fi...
Insufficiently Protected Credentials
Jenkins Applatix Plugin stores a password unencrypted in job config.xml files on the Jenkins master where it can be viewed by users with Extended Read permission, or access to the master file system...
PT-2020-15340 · Jenkins · Jenkins Harvest Scm Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Harvest SCM Plugin versions 0.5.1 and earlier Description: The issue allows passwords to be stored unencrypted in job config.xml files on the Jenkins master. These passwords can be viewed by users with Extended Read permission or thos...
PT-2020-15334 · Jenkins · Jenkins Digitalocean Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins DigitalOcean Plugin version 1.1 and earlier Description: The issue concerns the storage of a token in an unencrypted form within the global config.xml file on the Jenkins master. This token can be accessed by users who have permission...
PT-2020-15338 · Jenkins · Jenkins Eagle Tester Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Eagle Tester Plugin versions 1.0.9 and earlier Description: The issue concerns the storage of a password in an unencrypted form in the global configuration file on the Jenkins master. This allows users with access to the master file...
PT-2020-15337 · Jenkins · Jenkins Ecx Copy Data Management Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins ECX Copy Data Management Plugin versions 1.9 and earlier Description: The issue allows users with Extended Read permission, or access to the master file system, to view a password stored unencrypted in job config.xml files on the...
PT-2020-15342 · Jenkins · Jenkins Applatix Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Applatix Plugin versions 1.1 and earlier Description: The issue allows unauthorized access to unencrypted passwords stored in job config.xml files on the Jenkins master. Users with Extended Read permission or access to the master file...
PT-2020-15336 · Jenkins · Jenkins Bmc Release Package/Deployment Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins BMC Release Package and Deployment Plugin versions 1.1 and earlier Description: The issue allows credentials to be stored unencrypted in the global configuration file on the Jenkins master. This can be viewed by users with access to t...
Security Vulnerabilities fixed in Thunderbird 68.5 — Mozilla
When processing an email message with an ill-formed envelope, Thunderbird could read data from a random memory location. If a user saved passwords before Thunderbird 60 and then later set a master password, an unencrypted copy of these passwords is still accessible. This is because the older stor...
CVE-2020-8506
The Global TV application 2.3.2 for Android and 4.7.5 for iOS sends Unencrypted Analytics...
CVE-2020-8507
The Citytv Video application 4.08.0 for Android and 3.35 for iOS sends Unencrypted Analytics...
CVE-2020-8506
The Global TV application 2.3.2 for Android and 4.7.5 for iOS sends Unencrypted Analytics...
CVE-2020-8507
The Citytv Video application 4.08.0 for Android and 3.35 for iOS sends Unencrypted Analytics...
Code injection
The Global TV application 2.3.2 for Android and 4.7.5 for iOS sends Unencrypted Analytics...
Design/Logic Flaw
The Citytv Video application 4.08.0 for Android and 3.35 for iOS sends Unencrypted Analytics...
CVE-2020-8506
The Global TV application 2.3.2 for Android and 4.7.5 for iOS sends Unencrypted Analytics...
CVE-2020-8506
The CVE-2020-8506 entry concerns the Global TV application (Android 2.3.2; iOS 4.7.5) that transmits analytics data unencrypted. The affected component is the application’s analytics/telemetry pathway, leading to a potential confidentiality impact as analytics could be observed in transit. Impact...