CVE-2023-6147

The Connected documents corroborate CVE-2023-6147 affecting the Qualys Jenkins Plugin for Policy Compliance (versions up to 1.0.5). The root cause is a missing permission check during a connectivity test to Qualys Cloud Services, which allowed any user with login and job-configuration access to p...

CVE-2023-6148

Qualys Jenkins Plugin for Policy Compliance (versions prior to and including 1.0.5) is affected by a permission-check weakness during connectivity checks to Qualys Cloud Services. This flaw allows any user with login access and the ability to configure/edit jobs to route traffic through a rogue e...