CVE-2021-22512

CVE-2021-22512 is a CSRF vulnerability in the Micro Focus Application Automation Tools Plugin for Jenkins (affected: 6.7 and earlier). The issue arises in form validation methods that do not perform permission checks, allowing an attacker with Overall/Read to access attacker-specified URLs using ...

CVE-2021-22510

CVE-2021-22510 affects the Micro Focus Application Automation Tools Plugin for Jenkins (plugin version 6.7 and earlier). The root cause is that user input is not escaped in a form validation response, leading to a Reflected XSS vulnerability. Several connected sources corroborate this issue and n...

CVE-2021-22511

CVE-2021-22511 affects Micro Focus Application Automation Tools Plugin for Jenkins (versions 6.7 and earlier). It is an improper certificate validation vulnerability where the plugin could unconditionally disable SSL/TLS certificate validation for connections to Service Virtualization servers. Ro...

CVE-2021-22513

CVE-2021-22513 is a real-world vulnerability affecting the Micro Focus Application Automation Tools Plugin for Jenkins, version 6.7 and earlier. The root cause is missing authorization checks in form-validation methods, enabling attackers with Overall/Read permission to access attacker-specified ...