Non notée
CVE-2019-10430 Jenkins NeuVector Vulnerability Scanner Plugin 1.5 and earlier stored credentials unencrypted in its global…
Description
Jenkins NeuVector Vulnerability Scanner Plugin 1.5 and earlier stored credentials unencrypted in its global configuration file on the Jenkins master where they could be viewed by users with access to the master file system.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Jenkins NeuVector Vulnerability Scanner Plugin | Versions non publiées |
Références
- jenkins.io jenkins.io
- [oss-security] 20190925 Multiple vulnerabilities in Jenkins and Jenkins plugins www.openwall.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Jenkins NeuVector Vulnerability Scanner Plugin
Les 5 CVE de Jenkins NeuVector Vulnerability Scanner Plugin →
CVE-2023-49674
A missing permission check in Jenkins NeuVector Vulnerability Scanner Plugin 1.22 and earlier allows attackers with…
Non notée
CVE-2023-49673
A cross-site request forgery (CSRF) vulnerability in Jenkins NeuVector Vulnerability Scanner Plugin 1.22 and earlier…
8.8
Élevée
CVE-2023-30517
Jenkins NeuVector Vulnerability Scanner Plugin 1.22 and earlier unconditionally disables SSL/TLS certificate and…
5.3
Moyenne
CVE-2022-43434
Jenkins NeuVector Vulnerability Scanner Plugin 1.20 and earlier programmatically disables Content-Security-Policy…
5.3
Moyenne