Aller au contenu
Se connecter
Non notée

CVE-2022-34810 A missing check in Jenkins RQM Plugin 2.8 and earlier allows attackers with Overall/Read permission to enumerate…

Description

A missing check in Jenkins RQM Plugin 2.8 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.

Produits et versions touchés

Produit Versions touchées Corrigé en
Jenkins RQM Plugin 2.8 premières → 2.8 Pas de correctif indiqué

Autres CVE de Jenkins RQM Plugin

Les 3 CVE de Jenkins RQM Plugin →
CVE-2022-41241 Jenkins RQM Plugin 2.8 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks 9.8 Critique CVE-2022-34809 Jenkins RQM Plugin 2.8 and earlier stores a password unencrypted in its global configuration file on the Jenkins… Non notée
Suivre cette CVE