Non notée
CVE-2020-2155 Jenkins OpenShift Deployer Plugin 1.2.0 and earlier transmits configured credentials in plain text as part of its global…
Description
Jenkins OpenShift Deployer Plugin 1.2.0 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Jenkins OpenShift Deployer Plugin 1.2 | premières → 1.2.0 | Pas de correctif indiqué |
Références
- jenkins.io jenkins.io
- [oss-security] 20200309 Multiple vulnerabilities in Jenkins plugins www.openwall.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Jenkins OpenShift Deployer Plugin
Les 7 CVE de Jenkins OpenShift Deployer Plugin →
CVE-2022-36909
A missing permission check in Jenkins OpenShift Deployer Plugin 1.2.0 and earlier allows attackers with Overall/Read…
Non notée
CVE-2022-36908
A cross-site request forgery (CSRF) vulnerability in Jenkins OpenShift Deployer Plugin 1.2.0 and earlier allows…
Non notée
CVE-2022-36907
A missing permission check in Jenkins OpenShift Deployer Plugin 1.2.0 and earlier allows attackers with Overall/Read…
Non notée
CVE-2022-36906
A cross-site request forgery (CSRF) vulnerability in Jenkins OpenShift Deployer Plugin 1.2.0 and earlier allows…
Non notée