CVE-2022-38665

CVE-2022-38665 applies to Jenkins CollabNet Plugins Plugin 2.0.8 and earlier, where the RabbitMQ password is stored unencrypted in the plugin’s global configuration file on the Jenkins controller. This allows users with filesystem access to view the password. Red Hat, OSV, and Nessus records corr...

CVE-2018-1000605

The CVE-2018-1000605 vulnerability affects CloudBees Jenkins CollabNet Plugin (versions up to 2.0.4). A MITM flaw resides in CollabNetApp.java, CollabNetPlugin.java, and CNFormFieldValidator.java, allowing an attacker to impersonate any service Jenkins connects to. This is a network-exposed issue...