Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in
JenkinsReverse Proxy Auth

3 matches found

CVE
CVE•added 2022/11/15 12:0 a.m.•273 views

CVE-2022-45384

CVE-2022-45384 affects the Jenkins Reverse Proxy Auth Plugin. Versions 1.7.3 and earlier store the LDAP manager password unencrypted in the Jenkins controller’s global config.xml, enabling access by anyone with filesystem access to the controller. The vulnerability is triggered by plaintext stora...

6.5CVSS6.6AI score0.00649EPSS
CVE
CVE•added 2023/05/16 4:0 p.m.•65 views

CVE-2023-32987

The CVE affects Jenkins Reverse Proxy Auth Plugin (versions ≤ 1.7.4). A CSRF flaw allows an attacker to connect to an attacker-specified LDAP server using attacker-specified credentials. Impact is high on confidentiality, integrity, and availability (CVE-2023-32987, CVSS v3.1: 8.8). The issue ari...

8.8CVSS8.6AI score0.0045EPSS
CVE
CVE•added 2018/04/05 1:0 p.m.•62 views

CVE-2018-1000150

CVE-2018-1000150 affects Jenkins' Reverse Proxy Auth Plugin

3.3CVSS3.6AI score0.00349EPSS