Delphix Security Vulnerabilities and Issues — Delphix CVE List

Lucene search

JenkinsDelphix

5 matches found

CVE•added 2023/08/16 3:15 p.m.•247 views

CVE-2023-40345

Jenkins Delphix Plugin 3.0.2 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Overall/Read permission to access and capture credentials they are not entitled to.

6.5CVSS6.3AI score0.00051EPSS

CVE•added 2023/08/16 3:15 p.m.•234 views

CVE-2023-40344

A missing permission check in Jenkins Delphix Plugin 3.0.2 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.

4.3CVSS4.3AI score0.00047EPSS

CVE•added 2024/03/06 5:15 p.m.•68 views

CVE-2024-28161

In Jenkins Delphix Plugin 3.0.1, a global option for administrators to enable or disable SSL/TLS certificate validation for Data Control Tower (DCT) connections is disabled by default.

5.3CVSS6.5AI score0.00011EPSS

CVE•added 2024/03/06 5:15 p.m.•61 views

CVE-2024-28162

In Jenkins Delphix Plugin 3.0.1 through 3.1.0 (both inclusive) a global option for administrators to enable or disable SSL/TLS certificate validation for Data Control Tower (DCT) connections fails to take effect until Jenkins is restarted when switching from disabled validation to enabled validatio...

4.2CVSS6.5AI score0.00035EPSS

CVE•added 2019/10/16 2:15 p.m.•57 views

CVE-2019-10453

Jenkins Delphix Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.

7.8CVSS7.5AI score0.00014EPSS