Browse CVEs

HIGH 8.8 CVE-2019-10298 Jenkins Koji Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with acce… Koji Mitigation only Fix from $1,9502019-04-04 HIGH 8.8 CVE-2019-10299 Jenkins CloudCoreo DeployTime Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed b… Cloudcoreo Deploytime Mitigation only Fix from $1,9502019-04-04 MEDIUM 6.5 CVE-2019-10292 A cross-site request forgery vulnerability in Jenkins Kmap Plugin in KmapJenkinsBuilder.DescriptorImpl form validation methods allows attackers to in… Kmap Mitigation only Fix from $1,6002019-04-04 MEDIUM 6.5 CVE-2019-10293 A missing permission check in Jenkins Kmap Plugin in KmapJenkinsBuilder.DescriptorImpl form validation methods allows attackers with Overall/Read per… Kmap Mitigation only Fix from $1,6002019-04-04 HIGH 8.8 CVE-2019-10277 Jenkins StarTeam Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended … Starteam Mitigation only Fix from $1,9502019-04-04 HIGH 8.8 CVE-2019-10280 Jenkins Assembla Auth Plugin stores credentials unencrypted in the global config.xml configuration file on the Jenkins master where they can be viewe… Assembla Auth Mitigation only Fix from $1,9502019-04-04 HIGH 8.8 CVE-2019-10281 Jenkins Relution Enterprise Appstore Publisher Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where the… Relution Enterprise Appstore Publisher Mitigation only Fix from $1,9502019-04-04 HIGH 8.8 CVE-2019-10282 Jenkins Klaros-Testmanagement Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users w… Klaros Testmanagement Mitigation only Fix from $1,9502019-04-04 HIGH 8.8 CVE-2019-10283 Jenkins mabl Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read… Mabl Mitigation only Fix from $1,9502019-04-04 HIGH 8.8 CVE-2019-10284 Jenkins Diawi Upload Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Exten… Diawi Upload Mitigation only Fix from $1,9502019-04-04 HIGH 8.8 CVE-2019-10285 Jenkins Minio Storage Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users … Minio Storage Mitigation only Fix from $1,9502019-04-04 HIGH 8.8 CVE-2019-10286 Jenkins DeployHub Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended… Deployhub Mitigation only Fix from $1,9502019-04-04 HIGH 8.8 CVE-2019-10287 Jenkins youtrack-plugin Plugin 0.7.1 and older stored credentials unencrypted in its global configuration file on the Jenkins master where they could… Youtrack Plugin after 0.7.1 Fix from $1,9502019-04-04 HIGH 8.8 CVE-2019-10288 Jenkins Jabber Server Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users … Jabber Server Mitigation only Fix from $1,9502019-04-04 HIGH 8.8 CVE-2019-10291 Jenkins Netsparker Cloud Scan Plugin 1.1.5 and older stored credentials unencrypted in its global configuration file on the Jenkins master where they… Netsparker Cloud Scan after 1.1.5 Fix from $1,9502019-04-04 MEDIUM 6.5 CVE-2019-1003094 Jenkins Open STF Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with … Open Stf after 1.0.9 Fix from $1,6002019-04-04 MEDIUM 6.5 CVE-2019-1003095 Jenkins Perfecto Mobile Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by user… Perfecto Mobile after 2.62.0.3 Fix from $1,6002019-04-04 MEDIUM 6.5 CVE-2019-1003096 Jenkins TestFairy Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended… Testfairy after 4.16 Fix from $1,6002019-04-04 MEDIUM 6.5 CVE-2019-1003097 Jenkins Crowd Integration Plugin stores credentials unencrypted in the global config.xml configuration file on the Jenkins master where they can be v… Crowd Integration after 1.2 Fix from $1,6002019-04-04 MEDIUM 6.5 CVE-2019-1003098 A cross-site request forgery vulnerability in Jenkins openid Plugin in the OpenIdSsoSecurityRealm.DescriptorImpl#doValidate form validation method al… Openid Mitigation only Fix from $1,6002019-04-04 MEDIUM 6.5 CVE-2019-1003099 A missing permission check in Jenkins openid Plugin in the OpenIdSsoSecurityRealm.DescriptorImpl#doValidate form validation method allows attackers w… Openid after 2.3 Fix from $1,6002019-04-04 MEDIUM 6.5 CVE-2019-10278 A cross-site request forgery vulnerability in Jenkins jenkins-reviewbot Plugin in the ReviewboardDescriptor#doTestConnection form validation method a… Jenkins Reviewbot Mitigation only Fix from $1,6002019-04-04 MEDIUM 6.5 CVE-2019-10279 A missing permission check in Jenkins jenkins-reviewbot Plugin in the ReviewboardDescriptor#doTestConnection form validation method allows attackers … Jenkins Reviewbot Mitigation only Fix from $1,6002019-04-04 MEDIUM 6.5 CVE-2019-10289 A cross-site request forgery vulnerability in Jenkins Netsparker Cloud Scan Plugin 1.1.5 and older in the NCScanBuilder.DescriptorImpl#doValidateAPI … Netsparker Cloud Scan after 1.1.5 Fix from $1,6002019-04-04 MEDIUM 6.5 CVE-2019-10290 A missing permission check in Jenkins Netsparker Cloud Scan Plugin 1.1.5 and older in the NCScanBuilder.DescriptorImpl#doValidateAPI form validation … Netsparker Cloud Scan after 1.1.5 Fix from $1,6002019-04-04 HIGH 8.8 CVE-2019-1003066 Jenkins Bugzilla Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with … Bugzilla Mitigation only Fix from $1,9502019-04-04 HIGH 8.8 CVE-2019-1003067 Jenkins Trac Publisher Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Ext… Trac Publisher Mitigation only Fix from $1,9502019-04-04 HIGH 8.8 CVE-2019-1003068 Jenkins VMware vRealize Automation Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by us… Vmware Vrealize Automation Mitigation only Fix from $1,9502019-04-04 HIGH 8.8 CVE-2019-1003069 Jenkins Aqua Security Scanner Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed b… Aqua Security Scanner Mitigation only Fix from $1,9502019-04-04 HIGH 8.8 CVE-2019-1003070 Jenkins veracode-scanner Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by use… Veracode Scanner Mitigation only Fix from $1,9502019-04-04