CVE-2017-1000114

CVE-2017-1000114 concerns the Jenkins/Datadog plugin where the API key used to access Datadog was stored in the global Jenkins configuration and transmitted in plain text via the configuration form, potentially exposing the key through browser extensions or XSS. Documents indicate the plugin was ...

CVE-2023-37944

The CVE-2023-37944 issue affects Jenkins Datadog Plugin (versions up to 5.4.1). A missing permission check on an HTTP endpoint allows attackers with Overall/Read to connect to an attacker-specified URL using attacker-specified credentials IDs, enabling capture of credentials stored in Jenkins. Mi...