Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-2093 State: PUBLISHED Published: 2020-01-15T15:15:24 Last Updated: 2024-08-04T06:54:00.882Z Vendors: Jenkins project Products: Jenkins Health Advisor by CloudBees Plugin Description: A cross-site request forgery vulnerability in Jenkins Health Advisor by CloudBees Plugin 3.0 and earlier allows attackers to send an email with fixed content to an attacker-specified recipient. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-01-15/#SECURITY-1708
CVE ID: CVE-2020-2094 State: PUBLISHED Published: 2020-01-15T15:15:25 Last Updated: 2024-08-04T06:54:00.717Z Vendors: Jenkins project Products: Jenkins Health Advisor by CloudBees Plugin Description: A missing permission check in Jenkins Health Advisor by CloudBees Plugin 3.0 and earlier allows attackers with Overall/Read permission to send a fixed email to an attacker-specific recipient. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-01-15/#SECURITY-1708
CVE ID: CVE-2020-2095 State: PUBLISHED Published: 2020-01-15T15:15:25 Last Updated: 2024-08-04T06:54:00.655Z Vendors: Jenkins project Products: Jenkins Redgate SQL Change Automation Plugin Description: Jenkins Redgate SQL Change Automation Plugin 2.0.4 and earlier stored an API key unencrypted in job config.xml files on the Jenkins master where they could be viewed by users with Extended Read permission, or access to the master file system. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-01-15/#SECURITY-1696
CVE ID: CVE-2020-2096 State: PUBLISHED Published: 2020-01-15T15:15:26 Last Updated: 2024-08-04T06:54:00.594Z Vendors: Jenkins project Products: Jenkins Gitlab Hook Plugin Description: Jenkins Gitlab Hook Plugin 1.4.2 and earlier does not escape project names in the build_now endpoint, resulting in a reflected XSS vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-01-15/#SECURITY-1683 - http://www.openwall.com/lists/oss-security/2020/01/15/1 - http://packetstormsecurity.com/files/155967/Jenkins-Gitlab-Hook-1.4.2-Cross-Site-Scripting.html
CVE ID: CVE-2020-2097 State: PUBLISHED Published: 2020-01-15T15:15:26 Last Updated: 2024-08-04T06:54:00.613Z Vendors: Jenkins project Products: Jenkins Sounds Plugin Description: Jenkins Sounds Plugin 0.5 and earlier does not perform permission checks in URLs performing form validation, allowing attackers with Overall/Read access to execute arbitrary OS commands as the OS user account running Jenkins. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-01-15/#SECURITY-814
CVE ID: CVE-2020-2098 State: PUBLISHED Published: 2020-01-15T15:15:26 Last Updated: 2024-08-04T07:01:39.583Z Vendors: Jenkins project Products: Jenkins Sounds Plugin Description: A cross-site request forgery vulnerability in Jenkins Sounds Plugin 0.5 and earlier allows attacker to execute arbitrary OS commands as the OS user account running Jenkins. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-01-15/#SECURITY-814
CVE ID: CVE-2020-2099 State: PUBLISHED Published: 2020-01-29T15:15:27 Last Updated: 2024-08-04T07:01:39.729Z Vendors: Jenkins project Products: Jenkins Description: Jenkins 2.213 and earlier, LTS 2.204.1 and earlier improperly reuses encryption key parameters in the Inbound TCP Agent Protocol/3, allowing unauthorized attackers with knowledge of agent names to obtain the connection secrets for those agents, which can be used to connect to Jenkins, impersonating those agents. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-01-29/#SECURITY-1682 - http://www.openwall.com/lists/oss-security/2020/01/29/1 - https://access.redhat.com/errata/
/2020-01-29/#SECURITY-1682 - http://www.openwall.com/lists/oss-security/2020/01/29/1 - https://access.redhat.com/errata/RHSA-2020:0681 - https://access.redhat.com/errata/RHSA-2020:0683 - https://access.redhat.com/errata/RHBA-2020:0402 - https://access.redhat.com/errata/RHBA-2020:0675
CVE ID: CVE-2020-2100 State: PUBLISHED Published: 2020-01-29T15:15:28 Last Updated: 2024-08-04T07:01:39.694Z Vendors: Jenkins project Products: Jenkins Description: Jenkins 2.218 and earlier, LTS 2.204.1 and earlier was vulnerable to a UDP amplification reflection denial of service attack on port 33848. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-01-29/#SECURITY-1641 - http://www.openwall.com/lists/oss-security/2020/01/29/1 - https://access.redhat.com/errata/RHSA-2020:0681 - https://access.redhat.com/errata/RHSA-2020:0683 - https://access.redhat.com/errata/RHBA-2020:0402 - https://access.redhat.com/errata/RHBA-2020:0675
CVE ID: CVE-2020-2101 State: PUBLISHED Published: 2020-01-29T15:15:28 Last Updated: 2024-08-04T07:01:39.702Z Vendors: Jenkins project Products: Jenkins Description: Jenkins 2.218 and earlier, LTS 2.204.1 and earlier did not use a constant-time comparison function for validating connection secrets, which could potentially allow an attacker to use a timing attack to obtain this secret. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-01-29/#SECURITY-1659 - http://www.openwall.com/lists/oss-security/2020/01/29/1 - https://access.redhat.com/errata/RHSA-2020:0681 - https://access.redhat.com/errata/RHSA-2020:0683 - https://access.redhat.com
://access.redhat.com/errata/RHSA-2020:0681 - https://access.redhat.com/errata/RHSA-2020:0683 - https://access.redhat.com/errata/RHBA-2020:0402 - https://access.redhat.com/errata/RHBA-2020:0675
CVE ID: CVE-2020-2102 State: PUBLISHED Published: 2020-01-29T15:15:28 Last Updated: 2024-08-04T07:01:39.728Z Vendors: Jenkins project Products: Jenkins Description: Jenkins 2.218 and earlier, LTS 2.204.1 and earlier used a non-constant time comparison function when validating an HMAC. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-01-29/#SECURITY-1660 - http://www.openwall.com/lists/oss-security/2020/01/29/1 - https://access.redhat.com/errata/RHSA-2020:0681 - https://access.redhat.com/errata/RHSA-2020:0683 - https://access.redhat.com/errata/RHBA-2020:0402 - https://access.redhat.com/errata/RHBA-2020:0675
CVE ID: CVE-2020-2103 State: PUBLISHED Published: 2020-01-29T15:15:29 Last Updated: 2024-08-04T07:01:39.590Z Vendors: Jenkins project Products: Jenkins Description: Jenkins 2.218 and earlier, LTS 2.204.1 and earlier exposed session identifiers on a user's detail object in the whoAmI diagnostic page. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-01-29/#SECURITY-1695 - http://www.openwall.com/lists/oss-security/2020/01/29/1 - https://access.redhat.com/errata/RHSA-2020:0681 - https://access.redhat.com/errata/RHSA-2020:0683 - https://access.redhat.com/errata/RHBA-2020:0402 - https://access.redhat.com/errata/RHBA-2020:0675
CVE ID: CVE-2020-2104 State: PUBLISHED Published: 2020-01-29T15:15:29 Last Updated: 2024-08-04T07:01:39.714Z Vendors: Jenkins project Products: Jenkins Description: Jenkins 2.218 and earlier, LTS 2.204.1 and earlier allowed users with Overall/Read access to view a JVM memory usage chart. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-01-29/#SECURITY-1650 - http://www.openwall.com/lists/oss-security/2020/01/29/1 - https://access.redhat.com/errata/RHSA-2020:0681 - https://access.redhat.com/errata/RHSA-2020:0683 - https://access.redhat.com/errata/RHBA-2020:0402 - https://access.redhat.com/errata/RHBA-2020:0675
CVE ID: CVE-2020-2105 State: PUBLISHED Published: 2020-01-29T15:15:30 Last Updated: 2024-08-04T07:01:40.735Z Vendors: Jenkins project Products: Jenkins Description: REST API endpoints in Jenkins 2.218 and earlier, LTS 2.204.1 and earlier were vulnerable to clickjacking attacks. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-01-29/#SECURITY-1704 - http://www.openwall.com/lists/oss-security/2020/01/29/1 - https://access.redhat.com/errata/RHSA-2020:0681 - https://access.redhat.com/errata/RHSA-2020:0683 - https://access.redhat.com/errata/RHBA-2020:0402 - https://access.redhat.com/errata/RHBA-2020:0675
CVE ID: CVE-2020-2106 State: PUBLISHED Published: 2020-01-29T15:15:30 Last Updated: 2024-08-04T07:01:39.703Z Vendors: Jenkins project Products: Jenkins Code Coverage API Plugin Description: Jenkins Code Coverage API Plugin 1.1.2 and earlier does not escape the filename of the coverage report used in its view, resulting in a stored XSS vulnerability exploitable by users able to change job configurations. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-01-29/#SECURITY-1680 - http://www.openwall.com/lists/oss-security/2020/01/29/1
CVE ID: CVE-2020-2107 State: PUBLISHED Published: 2020-01-29T15:15:31 Last Updated: 2024-08-04T07:01:39.791Z Vendors: Jenkins project Products: Jenkins Fortify Plugin Description: Jenkins Fortify Plugin 19.1.29 and earlier stores proxy server passwords unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-01-29/#SECURITY-1565 - http://www.openwall.com/lists/oss-security/2020/01/29/1
CVE ID: CVE-2020-2108 State: PUBLISHED Published: 2020-01-29T15:15:31 Last Updated: 2024-08-04T07:01:39.769Z Vendors: Jenkins project Products: Jenkins WebSphere Deployer Plugin Description: Jenkins WebSphere Deployer Plugin 1.6.1 and earlier does not configure the XML parser to prevent XXE attacks which can be exploited by a user with Job/Configure permissions. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-01-29/#SECURITY-1719 - http://www.openwall.com/lists/oss-security/2020/01/29/1
CVE ID: CVE-2020-2109 State: PUBLISHED Published: 2020-02-12T14:35:40 Last Updated: 2024-08-04T07:01:39.732Z Vendors: Jenkins project Products: Jenkins Pipeline: Groovy Plugin Description: Sandbox protection in Jenkins Pipeline: Groovy Plugin 2.78 and earlier can be circumvented through default parameter expressions in CPS-transformed methods. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-02-12/#SECURITY-1710 - http://www.openwall.com/lists/oss-security/2020/02/12/3
CVE ID: CVE-2020-2110 State: PUBLISHED Published: 2020-02-12T14:35:40 Last Updated: 2024-08-04T07:01:39.727Z Vendors: Jenkins project Products: Jenkins Script Security Plugin Description: Sandbox protection in Jenkins Script Security Plugin 1.69 and earlier could be circumvented during the script compilation phase by applying AST transforming annotations to imports or by using them inside of other annotations. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-02-12/#SECURITY-1713 - http://www.openwall.com/lists/oss-security/2020/02/12/3
CVE ID: CVE-2020-2111 State: PUBLISHED Published: 2020-02-12T14:35:41 Last Updated: 2024-08-04T07:01:39.673Z Vendors: Jenkins project Products: Jenkins Subversion Plugin Description: Jenkins Subversion Plugin 2.13.0 and earlier does not escape the error message for the Project Repository Base URL field form validation, resulting in a stored cross-site scripting vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-02-12/#SECURITY-1725 - http://www.openwall.com/lists/oss-security/2020/02/12/3
CVE ID: CVE-2020-2112 State: PUBLISHED Published: 2020-02-12T14:35:41 Last Updated: 2024-08-04T07:01:40.443Z Vendors: Jenkins project Products: Jenkins Git Parameter Plugin Description: Jenkins Git Parameter Plugin 0.9.11 and earlier does not escape the parameter name shown on the UI, resulting in a stored cross-site scripting vulnerability exploitable by users with Job/Configure permission. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-02-12/#SECURITY-1709 - http://www.openwall.com/lists/oss-security/2020/02/12/3
CVE ID: CVE-2020-2113 State: PUBLISHED Published: 2020-02-12T14:35:41 Last Updated: 2024-08-04T07:01:40.866Z Vendors: Jenkins project Products: Jenkins Git Parameter Plugin Description: Jenkins Git Parameter Plugin 0.9.11 and earlier does not escape the default value shown on the UI, resulting in a stored cross-site scripting vulnerability exploitable by users with Job/Configure permission. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-02-12/#SECURITY-1709 - http://www.openwall.com/lists/oss-security/2020/02/12/3
CVE ID: CVE-2020-2114 State: PUBLISHED Published: 2020-02-12T14:35:42 Last Updated: 2024-08-04T07:01:40.926Z Vendors: Jenkins project Products: Jenkins S3 publisher Plugin Description: Jenkins S3 publisher Plugin 0.11.4 and earlier transmits configured credentials in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-02-12/#SECURITY-1684 - http://www.openwall.com/lists/oss-security/2020/02/12/3
CVE ID: CVE-2020-2115 State: PUBLISHED Published: 2020-02-12T14:35:42 Last Updated: 2024-08-04T07:01:40.663Z Vendors: Jenkins project Products: Jenkins NUnit Plugin Description: Jenkins NUnit Plugin 0.25 and earlier does not configure the XML parser to prevent XML external entity (XXE) attacks. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-02-12/#SECURITY-1752 - http://www.openwall.com/lists/oss-security/2020/02/12/3
CVE ID: CVE-2020-2116 State: PUBLISHED Published: 2020-02-12T14:35:43 Last Updated: 2024-08-04T07:01:39.734Z Vendors: Jenkins project Products: Jenkins Pipeline GitHub Notify Step Plugin Description: A cross-site request forgery vulnerability in Jenkins Pipeline GitHub Notify Step Plugin 1.0.4 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-02-12/#SECURITY-812%20%281%29 - http://www.openwall.com/lists/oss-security/2020/02/12/3
CVE ID: CVE-2020-2117 State: PUBLISHED Published: 2020-02-12T14:35:43 Last Updated: 2024-08-04T07:01:40.662Z Vendors: Jenkins project Products: Jenkins Pipeline GitHub Notify Step Plugin Description: A missing permission check in Jenkins Pipeline GitHub Notify Step Plugin 1.0.4 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-02-12/#SECURITY-812%20%281%29 - http://www.openwall.com/lists/oss-security/2020/02/12/3
CVE ID: CVE-2020-2118 State: PUBLISHED Published: 2020-02-12T14:35:44 Last Updated: 2024-08-04T07:01:40.697Z Vendors: Jenkins project Products: Jenkins Pipeline GitHub Notify Step Plugin Description: A missing permission check in Jenkins Pipeline GitHub Notify Step Plugin 1.0.4 and earlier in form-related methods allowed users with Overall/Read access to enumerate credentials ID of credentials stored in Jenkins. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-02-12/#SECURITY-812%20%282%29 - http://www.openwall.com/lists/oss-security/2020/02/12/3
CVE ID: CVE-2020-2119 State: PUBLISHED Published: 2020-02-12T14:35:44 Last Updated: 2024-08-04T07:01:41.123Z Vendors: Jenkins project Products: Jenkins Azure AD Plugin Description: Jenkins Azure AD Plugin 1.1.2 and earlier transmits configured credentials in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-02-12/#SECURITY-1717 - http://www.openwall.com/lists/oss-security/2020/02/12/3
CVE ID: CVE-2020-2120 State: PUBLISHED Published: 2020-02-12T14:35:44 Last Updated: 2024-08-04T07:01:40.804Z Vendors: Jenkins project Products: Jenkins FitNesse Plugin Description: Jenkins FitNesse Plugin 1.30 and earlier does not configure the XML parser to prevent XML external entity (XXE) attacks. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-02-12/#SECURITY-1751 - http://www.openwall.com/lists/oss-security/2020/02/12/3
CVE ID: CVE-2020-2121 State: PUBLISHED Published: 2020-02-12T14:35:45 Last Updated: 2024-08-04T07:01:40.793Z Vendors: Jenkins project Products: Jenkins Google Kubernetes Engine Plugin Description: Jenkins Google Kubernetes Engine Plugin 0.8.0 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-02-12/#SECURITY-1731 - http://www.openwall.com/lists/oss-security/2020/02/12/3
CVE ID: CVE-2020-2122 State: PUBLISHED Published: 2020-02-12T14:35:45 Last Updated: 2024-08-04T07:01:40.665Z Vendors: Jenkins project Products: Jenkins Brakeman Plugin Description: Jenkins Brakeman Plugin 0.12 and earlier did not escape values received from parsed JSON files when rendering them, resulting in a stored cross-site scripting vulnerability exploitable by users able to control the Brakeman post-build step input data. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-02-12/#SECURITY-1644 - http://www.openwall.com/lists/oss-security/2020/02/12/3
CVE ID: CVE-2020-2123 State: PUBLISHED Published: 2020-02-12T14:35:46 Last Updated: 2024-08-04T07:01:40.685Z Vendors: Jenkins project Products: Jenkins RadarGun Plugin Description: Jenkins RadarGun Plugin 1.7 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-02-12/#SECURITY-1733 - http://www.openwall.com/lists/oss-security/2020/02/12/3
CVE ID: CVE-2020-2124 State: PUBLISHED Published: 2020-02-12T14:35:46 Last Updated: 2024-08-04T07:01:41.051Z Vendors: Jenkins project Products: Jenkins Dynamic Extended Choice Parameter Plugin Description: Jenkins Dynamic Extended Choice Parameter Plugin 1.0.1 and earlier stores a password unencrypted in job config.xml files on the Jenkins master where it can be viewed by users with Extended Read permission, or access to the master file system. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-02-12/#SECURITY-1560 - http://www.openwall.com/lists/oss-security/2020/02/12/3
CVE ID: CVE-2020-2125 State: PUBLISHED Published: 2020-02-12T14:35:47 Last Updated: 2024-08-04T07:01:40.700Z Vendors: Jenkins project Products: Jenkins Debian Package Builder Plugin Description: Jenkins Debian Package Builder Plugin 1.6.11 and earlier stores a GPG passphrase unencrypted in its global configuration file on the Jenkins master where it can be viewed by users with access to the master file system. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-02-12/#SECURITY-1558 - http://www.openwall.com/lists/oss-security/2020/02/12/3
CVE ID: CVE-2020-2126 State: PUBLISHED Published: 2020-02-12T14:35:47 Last Updated: 2024-08-04T07:01:40.785Z Vendors: Jenkins project Products: Jenkins DigitalOcean Plugin Description: Jenkins DigitalOcean Plugin 1.1 and earlier stores a token unencrypted in the global config.xml file on the Jenkins master where it can be viewed by users with access to the master file system. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-02-12/#SECURITY-1559 - http://www.openwall.com/lists/oss-security/2020/02/12/3
CVE ID: CVE-2020-2127 State: PUBLISHED Published: 2020-02-12T14:35:47 Last Updated: 2024-08-04T07:01:40.846Z Vendors: Jenkins project Products: Jenkins BMC Release Package and Deployment Plugin Description: Jenkins BMC Release Package and Deployment Plugin 1.1 and earlier stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-02-12/#SECURITY-1547 - http://www.openwall.com/lists/oss-security/2020/02/12/3
CVE ID: CVE-2020-2128 State: PUBLISHED Published: 2020-02-12T14:35:48 Last Updated: 2024-08-04T07:01:41.096Z Vendors: Jenkins project Products: Jenkins ECX Copy Data Management Plugin Description: Jenkins ECX Copy Data Management Plugin 1.9 and earlier stores a password unencrypted in job config.xml files on the Jenkins master where it can be viewed by users with Extended Read permission, or access to the master file system. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-02-12/#SECURITY-1549 - http://www.openwall.com/lists/oss-security/2020/02/12/3
CVE ID: CVE-2020-2129 State: PUBLISHED Published: 2020-02-12T14:35:48 Last Updated: 2024-08-04T07:01:40.874Z Vendors: Jenkins project Products: Jenkins Eagle Tester Plugin Description: Jenkins Eagle Tester Plugin 1.0.9 and earlier stores a password unencrypted in its global configuration file on the Jenkins master where it can be viewed by users with access to the master file system. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-02-12/#SECURITY-1552 - http://www.openwall.com/lists/oss-security/2020/02/12/3
CVE ID: CVE-2020-2130 State: PUBLISHED Published: 2020-02-12T14:35:49 Last Updated: 2024-08-04T07:01:40.936Z Vendors: Jenkins project Products: Jenkins Harvest SCM Plugin Description: Jenkins Harvest SCM Plugin 0.5.1 and earlier stores a password unencrypted in its global configuration file on the Jenkins master where it can be viewed by users with access to the master file system. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-02-12/#SECURITY-1553 - http://www.openwall.com/lists/oss-security/2020/02/12/3
CVE ID: CVE-2020-2131 State: PUBLISHED Published: 2020-02-12T14:35:49 Last Updated: 2024-08-04T07:01:40.876Z Vendors: Jenkins project Products: Jenkins Harvest SCM Plugin Description: Jenkins Harvest SCM Plugin 0.5.1 and earlier stores passwords unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-02-12/#SECURITY-1553 - http://www.openwall.com/lists/oss-security/2020/02/12/3
CVE ID: CVE-2020-2132 State: PUBLISHED Published: 2020-02-12T14:35:49 Last Updated: 2024-08-04T07:01:40.632Z Vendors: Jenkins project Products: Jenkins Parasoft Environment Manager Plugin Description: Jenkins Parasoft Environment Manager Plugin 2.14 and earlier stores a password unencrypted in job config.xml files on the Jenkins master where it can be viewed by users with Extended Read permission, or access to the master file system. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-02-12/#SECURITY-1562 - http://www.openwall.com/lists/oss-security/2020/02/12/3