deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-17044
Published: 2019-10-14
Description: An issue was discovered in BMC Patrol Agent 9.0.10i. Weak execution permissions on the PatrolAgent SUID binary could allow an attacker with "patrol" privileges to elevate his/her privileges to the ones of the "root" user by specially crafting a shared library .so file that will be loaded during execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://docs.bmc.com/docs/PATROLAgent/11302/notification-of-action-required-by-patrol-agent-users-to-apply-the-security-patch-898411558.html; https://github.com/blogresponder/BMC-Patrol-Agent-local-root-privilege-escalation; https://twitter.com/whira_wr
CVE: CVE-2017-14948
Published: 2019-10-14
Description: Certain D-Link products are affected by: Buffer Overflow. This affects DIR-880L 1.08B04 and DIR-895 L/R 1.13b03. The impact is: execute arbitrary code (remote). The component is: htdocs/fileaccess.cgi. The attack vector is: A crafted HTTP request handled by fileacces.cgi could allow an attacker to mount a ROP attack: if the HTTP header field CONTENT_TYPE starts with ''boundary=' followed by more than 256 characters, a buffer overflow would be triggered, potentially causing code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://github.com/badnack/d_link_880_bug/blob/master/README.md; https://github.com/badnack/d_link_880_bug/blob/master/README.md
CVE: CVE-2019-12941
Published: 2019-10-14
Description: AutoPi Wi-Fi/NB and 4G/LTE devices before 2019-10-15 allows an attacker to perform a brute-force attack or dictionary attack to gain access to the WiFi network, which provides root access to the device. The default WiFi password and WiFi SSID are derived from the same hash function output (input is only 8 characters), which allows an attacker to deduce the WiFi password from the WiFi SSID.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-307
References: http://www.diva-portal.org/smash/get/diva2:1334244/FULLTEXT01.pdf; https://www.kth.se/nse/research/software-systems-architecture-and-security/; https://www.kth.se/polopoly_fs/[PII_REDACTED]071632%21/Burdzovic_Matsson_dongle_v2.pdf
CVE: CVE-2019-16282
Published: 2019-10-14
Description: In NCH Express Invoice v7.12, persistent cross site scripting (XSS) exists via the Invoices/Items/Customers/Quotes input field. An authenticated unprivileged user can add/modify the Invoices/Items/Customers fields parameter to inject arbitrary JavaScript.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.exploit-db.com/exploits/47496; https://www.exploit-db.com/exploits/47496
CVE: CVE-2019-3767
Published: 2019-10-14
Description: Dell ImageAssist versions prior to 8.7.15 contain an information disclosure vulnerability. Dell ImageAssist stores some sensitive encrypted information in the images it creates. A privileged user of a system running an operating system that was deployed with Dell ImageAssist could potentially retrieve this sensitive information to then compromise the system and related systems.
CVSS Score: 8.2 (HIGH)
CWE: CWE-200, CWE-312
References: https://www.dell.com/support/article/us/en/19/sln318831/dsa-2019-139; https://www.dell.com/support/article/us/en/19/sln318831/dsa-2019-139
CVE: CVE-2019-14737
Published: 2019-10-14
Description: Ubisoft Uplay 92.0.0.6280 has Insecure Permissions.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://www.exploit-db.com/exploits/47493; https://www.exploit-db.com/exploits/47493
CVE: CVE-2019-14823
Published: 2019-10-14
Description: A flaw was found in the "Leaf and Chain" OCSP policy implementation in JSS' CryptoManager versions after 4.4.6, 4.5.3, 4.6.0, where it implicitly trusted the root certificate of a certificate chain. Applications using this policy may not properly verify the chain and could be vulnerable to attacks such as Man in the Middle.
CVSS Score: 7.4 (HIGH)
CWE: CWE-358, CWE-295
References: https://access.redhat.com/errata/RHSA-2019:3067; https://access.redhat.com/errata/RHSA-2019:3225; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14823
CVE: CVE-2019-17592
Published: 2019-10-14
Description: The csv-parse module before 4.4.6 for Node.js is vulnerable to Regular Expression Denial of Service. The __isInt() function contains a malformed regular expression that processes large crafted input very slowly. This is triggered when using the cast option.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://github.com/adaltas/node-csv-parse/commit/b9d35940c6815cdf1dfd6b21857a1f6d0fd51e4a; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z36UKPO5F3PQ3Q2POMF5LEKXWAH5RUFP/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2019-17593
Published: 2019-10-14
Description: JIZHICMS 1.5.1 allows admin.php/Admin/adminadd.html CSRF to add an administrator.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/Cherry-toto/jizhicms/issues/1; https://github.com/Cherry-toto/jizhicms/issues/1
CVE: CVE-2019-17594
Published: 2019-10-14
Description: There is a heap-based buffer over-read in the _nc_find_entry function in tinfo/comp_hash.c in the terminfo library in ncurses before 6.1-20191012.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00059.html; http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00061.html; https://lists.gnu.org/archive/html/bug-ncurses/2019-10/msg00017.html
CVE: CVE-2019-17595
Published: 2019-10-14
Description: There is a heap-based buffer over-read in the fmt_entry function in tinfo/comp_hash.c in the terminfo library in ncurses before 6.1-20191012.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00059.html; http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00061.html; https://lists.gnu.org/archive/html/bug-ncurses/2019-10/msg00013.html
CVE: CVE-2019-17223
Published: 2019-10-15
Description: There is HTML Injection in the Note field in Dolibarr ERP/CRM 10.0.2 via user/note.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://medium.com/%40k43p/cve-2019-17223-stored-html-injection-dolibarr-crm-erp-ad1e064d0ca5; https://www.dolibarr.org/forum/dolibarr-changelogs; https://medium.com/%40k43p/cve-2019-17223-stored-html-injection-dolibarr-crm-erp-ad1e064d0ca5
CVE: CVE-2019-12944
Published: 2019-10-15
Description: Glue Smart Lock 2.7.8 devices do not properly block guest access in certain situations where the network connection is unavailable.
CVSS Score: 7.5 (HIGH)
CWE: CWE-862
References: https://www.kth.se/polopoly_fs/[PII_REDACTED]620889%21/Examensarbete%20Final.pdf; https://www.kth.se/polopoly_fs/[PII_REDACTED]073241%21/Vulnerability_Report_Glue_State_Consistency.pdf; https://www.kth.se/polopoly_fs/[PII_REDACTED]620889%21/Examensarbete%20Final.pdf
CVE: CVE-2019-17195
Published: 2019-10-15
Description: Connect2id Nimbus JOSE+JWT before v7.9 can throw various uncaught exceptions while parsing a JWT, which could result in an application crash (potential information disclosure) or a potential authentication bypass.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-755
References: https://bitbucket.org/connect2id/nimbus-jose-jwt/src/master/SECURITY-CHANGELOG.txt; https://connect2id.com/blog/nimbus-jose-jwt-7-9; https://lists.apache.org/thread.html/8768553cda5838f59ee3865cac546e824fa740e82d9dc2a7fc44e80d%40%3Ccommon-dev.hadoop.apache.org%3E
CVE: CVE-2019-17600
Published: 2019-10-15
Description: Intelbras IWR 1000N 1.6.4 devices allow disclosure of the administrator login name and password because v1/system/user is mishandled.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-352
References: https://pastebin.com/QbhVPyXm; https://www.exploit-db.com/exploits/46770/; https://pastebin.com/QbhVPyXm
CVE: CVE-2019-10759
Published: 2019-10-15
Description: safer-eval before 1.3.4 are vulnerable to Arbitrary Code Execution. A payload using constructor properties can escape the sandbox and execute arbitrary code.
CVSS Score: 9.9 (CRITICAL)
References: https://snyk.io/vuln/SNYK-JS-SAFEREVAL-173772; https://snyk.io/vuln/SNYK-JS-SAFEREVAL-173772
CVE: CVE-2019-10760
Published: 2019-10-15
Description: safer-eval before 1.3.2 are vulnerable to Arbitrary Code Execution. A payload using constructor properties can escape the sandbox and execute arbitrary code.
CVSS Score: 9.9 (CRITICAL)
References: https://snyk.io/vuln/SNYK-JS-SAFEREVAL-473029; https://snyk.io/vuln/SNYK-JS-SAFEREVAL-473029
CVE: CVE-2019-17397
Published: 2019-10-15
Description: In the DoorDash application through 11.5.2 for Android, the username and password are stored in the log during authentication, and may be available to attackers via logcat.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-532
References: https://pastebin.com/hGg5efMe; https://pastebin.com/hGg5efMe
CVE: CVE-2[PII_REDACTED]
Published: 2019-10-15
Description: In haml versions prior to version 5.0.0.beta.2, when using user input to perform tasks on the server, characters like < > " ' must be escaped properly. In this case, the ' character was missed. An attacker can manipulate the input to introduce additional attributes, potentially executing code.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/haml/haml/commit/18576ae6e9bdcb4303fdbe6b3199869d289d67c2; https://lists.debian.org/debian-lts-announce/2019/11/msg00007.html; https://lists.debian.org/debian-lts-announce/2021/12/msg00028.html
CVE: CVE-2019-14832
Published: 2019-10-15
Description: A flaw was found in the Keycloak REST API before version 8.0.0 where it would permit user access from a realm the user was not configured. An authenticated attacker with knowledge of a user id could use this flaw to access unauthorized information or to carry out further attacks.
CVSS Score: 7.5 (HIGH)
CWE: CWE-863, CWE-863
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14832; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14832
CVE: CVE-2019-17355
Published: 2019-10-15
Description: In the Orbitz application 19.31.1 for Android, the username and password are stored in the log during authentication, and may be available to attackers via logcat.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-532
References: https://pastebin.com/GgpFz3ZW; https://pastebin.com/GgpFz3ZW
CVE: CVE-2019-17356
Published: 2019-10-15
Description: The Infinite Design application 3.4.12 for Android sends a username and password via TCP without any encryption during login, as demonstrated by sniffing of a public Wi-Fi network.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-319, CWE-522
References: https://bit.ly/2kfL7xE; https://pastebin.com/yUFxs2J7; https://bit.ly/2kfL7xE
CVE: CVE-2019-17394
Published: 2019-10-15
Description: In the Seesaw Parent and Family application 6.2.5 for Android, the username and password are stored in the log during authentication, and may be available to attackers via logcat.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-532
References: https://pastebin.com/h8v0qxZH; https://pastebin.com/h8v0qxZH
CVE: CVE-2019-17396
Published: 2019-10-15
Description: In the PowerSchool Mobile application 1.1.8 for Android, the username and password are stored in the log during authentication, and may be available to attackers via logcat.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-532
References: https://pastebin.com/9VBiRpAR; https://pastebin.com/9VBiRpAR
CVE: CVE-2019-17398
Published: 2019-10-15
Description: In the Dark Horse Comics application 1.3.21 for Android, token information (equivalent to the username and password) is stored in the log during authentication, and may be available to attackers via logcat.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-532
References: https://pastebin.com/5ZDDCqgL; https://pastebin.com/5ZDDCqgL
CVE: CVE-2019-17601
Published: 2019-10-15
Description: In MiniShare 1.4.1, there is a stack-based buffer overflow via an HTTP CONNECT request, which allows an attacker to achieve arbitrary code execution, a similar issue to CVE-2018-19862 and CVE-2018-19861. NOTE: this product is discontinued.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://packetstormsecurity.com/files/154819/MiniShare-1.4.1-CONNECT-Remote-Buffer-Overflow.html; https://packetstormsecurity.com/files/154819/MiniShare-1.4.1-CONNECT-Remote-Buffer-Overflow.html
CVE: CVE-2019-17602
Published: 2019-10-15
Description: An issue was discovered in Zoho ManageEngine OpManager before 12.4 build 124089. The OPMDeviceDetailsServlet servlet is prone to SQL injection. Depending on the configuration, this vulnerability could be exploited unauthenticated or authenticated.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.manageengine.com/network-monitoring/help/read-me-complete.html; https://www.manageengine.com/network-monitoring/help/read-me-complete.html
CVE: CVE-2019-17395
Published: 2019-10-15
Description: In the Rapid Gator application 0.7.1 for Android, the username and password are stored in the log during authentication, and may be available to attackers via logcat.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-532
References: https://pastebin.com/8dvs5RcJ; https://pastebin.com/8dvs5RcJ
CVE: CVE-2019-17612
Published: 2019-10-15
Description: An issue was discovered in 74CMS v5.2.8. There is a SQL Injection generated by the _list method in the Common/Controller/BackendController.class.php file via the index.php?m=Admin&c=Ad&a=category sort parameter.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/Ers4tz/vuln/blob/master/74cms_5.2.8_SQLI.md; https://github.com/Ers4tz/vuln/blob/master/74cms_5.2.8_SQLI.md
CVE: CVE-2019-17613
Published: 2019-10-15
Description: qibosoft 7 allows remote code execution because do/jf.php makes eval calls. The attacker can use the Point Introduction Management feature to supply PHP code to be evaluated. Alternatively, the attacker can access admin/index.php?lfj=jfadmin&action=addjf via CSRF, as demonstrated by a payload in the content parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://github.com/Ers4tz/vuln/blob/master/qibosoft/qibosoft_v7_remote_code_execution.md; https://github.com/Ers4tz/vuln/blob/master/qibosoft/qibosoft_v7_remote_code_execution.md
CVE: CVE-2019-13392
Published: 2019-10-16
Description: A reflected Cross-Site Scripting (XSS) vulnerability in MindPalette NateMail 3.0.15 allows an attacker to execute remote JavaScript in a victim's browser via a specially crafted POST request. The application will reflect the recipient value if it is not in the NateMail recipient array. Note that this array is keyed via integers by default, so any string input will be invalid.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://mindpalette.com/tag/natemail/; https://twitter.com/mindpalette; https://www.doyler.net/security-not-included/natemail-vulnerabilities
CVE: CVE-2016-11014
Published: 2019-10-16
Description: NETGEAR JNR1010 devices before 1.0.0.32 have Incorrect Access Control because the ok value of the auth cookie is a special case.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-613
References: https://cybersecurityworks.com/zerodays/cve-2016-11014-netgear.html; https://github.com/cybersecurityworks/Disclosed/issues/14; https://khalil-shreateh.com/khalil.shtml/it-highlights/593-Netgear-1.0.0.24-Bypass---Improper-Session-Management--.html
CVE: CVE-2016-11015
Published: 2019-10-16
Description: NETGEAR JNR1010 devices before 1.0.0.32 allow cgi-bin/webproc CSRF via the :InternetGatewayDevice.X_TWSZ-COM_URL_Filter.BlackList.1.URL parameter.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://cybersecurityworks.com/zerodays/cve-2016-11015-netgear.html; https://github.com/cybersecurityworks/Disclosed/issues/13; https://lists.openwall.net/full-disclosure/2016/01/11/4
CVE: CVE-2016-11016
Published: 2019-10-16
Description: NETGEAR JNR1010 devices before 1.0.0.32 allow webproc?getpage= XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://007software.net/multiple-cross-site-scripting-in-netgear-router-version1-0-0-24/; https://cybersecurityworks.com/zerodays/cve-2016-11016-netgear.html; https://github.com/cybersecurityworks/Disclosed/issues/12
CVE: CVE-2019-17624
Published: 2019-10-16
Description: "" In X.Org X Server 1.20.4, there is a stack-based buffer overflow in the function XQueryKeymap. For example, by sending ct.c_char 1000 times, an attacker can cause a denial of service (application crash) or possibly have unspecified other impact. Note: It is disputed if the X.Org X Server is involved or if there is a stack overflow.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://packetstormsecurity.com/files/154868/X.Org-X-Server-1.20.4-Local-Stack-Overflow.html; https://www.exploit-db.com/exploits/47507; https://www.x.org/releases/individual/xserver/
CVE: CVE-2019-17625
Published: 2019-10-16
Description: There is a stored XSS in Rambox 0.6.9 that can lead to code execution. The XSS is in the name field while adding/editing a service. The problem occurs due to incorrect sanitization of the name field when being processed and stored. This allows a user to craft a payload for Node.js and Electron, such as an exec of OS commands within the onerror attribute of an IMG element.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-78, CWE-79
References: https://github.com/ramboxapp/community-edition/issues/2418; https://github.com/ramboxapp/community-edition/issues/2418
CVE: CVE-2019-17626
Published: 2019-10-16
Description: ReportLab through 3.5.26 allows remote code execution because of toColor(eval(arg)) in colors.py, as demonstrated by a crafted XML document with '<span color="' followed by arbitrary Python code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-91, CWE-91
References: http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00002.html; https://access.redhat.com/errata/RHSA-2020:0195; https://access.redhat.com/errata/RHSA-2020:0197
CVE: CVE-2019-17627
Published: 2019-10-16
Description: The Yale Bluetooth Key application for mobile devices allows unauthorized unlock actions by sniffing Bluetooth Low Energy (BLE) traffic during one authorized unlock action, and then calculating the authentication key via simple computations on the hex digits of a valid authentication request. This affects the Yale ZEN-R lock and unspecified other locks.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-287
References: https://github.com/PwnMonkeyLab/YaleDoorlockVulnerability/blob/master/HowToDo.md; https://github.com/PwnMonkeyLab/YaleDoorlockVulnerability/blob/master/HowToDo.md
CVE: CVE-2019-4031
Published: 2019-10-16
Description: IBM Workload Scheduler Distributed 9.2, 9.3, 9.4, and 9.5 contains a vulnerability that could allow a local user to write files as root in the file system, which could allow the attacker to gain root privileges. IBM X-Force ID: 155997.
CVSS Score: 7.8 (HIGH)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/155997; https://www.ibm.com/support/pages/node/1076775; https://exchange.xforce.ibmcloud.com/vulnerabilities/155997
CVE: CVE-2019-10436
Published: 2019-10-16
Description: An arbitrary file read vulnerability in Jenkins Google OAuth Credentials Plugin 0.9 and earlier allowed attackers able to configure jobs and credentials in Jenkins to obtain the contents of any file on the Jenkins master.
CVSS Score: 6.5 (MEDIUM)
References: https://jenkins.io/security/advisory/2019-10-16/#SECURITY-1583; https://jenkins.io/security/advisory/2019-10-16/#SECURITY-1583
CVE: CVE-2019-10437
Published: 2019-10-16
Description: A cross-site request forgery vulnerability in Jenkins CRX Content Package Deployer Plugin 1.8.1 and earlier allowed attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://jenkins.io/security/advisory/2019-10-16/#SECURITY-1006%20%281%29; https://jenkins.io/security/advisory/2019-10-16/#SECURITY-1006%20%281%29
CVE: CVE-2019-10438
Published: 2019-10-16
Description: A missing permission check in Jenkins CRX Content Package Deployer Plugin 1.8.1 and earlier allowed attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: https://jenkins.io/security/advisory/2019-10-16/#SECURITY-1006%20%281%29; https://jenkins.io/security/advisory/2019-10-16/#SECURITY-1006%20%281%29
CVE: CVE-2019-10439
Published: 2019-10-16
Description: A missing permission check in Jenkins CRX Content Package Deployer Plugin 1.8.1 and earlier in various 'doFillCredentialsIdItems' methods allowed users with Overall/Read access to enumerate credentials ID of credentials stored in Jenkins.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://jenkins.io/security/advisory/2019-10-16/#SECURITY-1006%20%282%29; https://jenkins.io/security/advisory/2019-10-16/#SECURITY-1006%20%282%29
CVE: CVE-2019-10440
Published: 2019-10-16
Description: Jenkins NeoLoad Plugin 2.2.5 and earlier stored credentials unencrypted in its global configuration file and in job config.xml files on the Jenkins master where they could be viewed by users with Extended Read permission, or access to the master file system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-312
References: http://www.openwall.com/lists/oss-security/2019/10/16/6; https://jenkins.io/security/advisory/2019-10-16/#SECURITY-1427; https://www.zerodayinitiative.com/advisories/ZDI-19-932/
CVE: CVE-2019-10441
Published: 2019-10-16
Description: A cross-site request forgery vulnerability in Jenkins iceScrum Plugin 1.1.5 and earlier allowed attackers to connect to an attacker-specified URL using attacker-specified credentials.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://jenkins.io/security/advisory/2019-10-16/#SECURITY-1484; https://jenkins.io/security/advisory/2019-10-16/#SECURITY-1484
CVE: CVE-2019-10442
Published: 2019-10-16
Description: A missing permission check in Jenkins iceScrum Plugin 1.1.5 and earlier allowed attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: http://www.openwall.com/lists/oss-security/2019/10/16/6; https://jenkins.io/security/advisory/2019-10-16/#SECURITY-1484; http://www.openwall.com/lists/oss-security/2019/10/16/6
CVE: CVE-2019-10443
Published: 2019-10-16
Description: Jenkins iceScrum Plugin 1.1.4 and earlier stored credentials unencrypted in job config.xml files on the Jenkins master where they could be viewed by users with Extended Read permission, or access to the master file system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-312
References: http://www.openwall.com/lists/oss-security/2019/10/16/6; https://jenkins.io/security/advisory/2019-10-16/#SECURITY-1436; https://www.zerodayinitiative.com/advisories/ZDI-19-933/
CVE: CVE-2019-10444
Published: 2019-10-16
Description: Jenkins Bumblebee HP ALM Plugin 4.1.3 and earlier unconditionally disabled SSL/TLS and hostname verification for connections to HP ALM.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-295
References: https://jenkins.io/security/advisory/2019-10-16/#SECURITY-1481; https://jenkins.io/security/advisory/2019-10-16/#SECURITY-1481
CVE: CVE-2019-10445
Published: 2019-10-16
Description: A missing permission check in Jenkins Google Kubernetes Engine Plugin 0.7.0 and earlier allowed attackers with Overall/Read permission to obtain limited information about the scope of a credential with an attacker-specified credentials ID.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: http://www.openwall.com/lists/oss-security/2019/10/16/6; https://jenkins.io/security/advisory/2019-10-16/#SECURITY-1607; http://www.openwall.com/lists/oss-security/2019/10/16/6
CVE: CVE-2019-10446
Published: 2019-10-16
Description: Jenkins Cadence vManager Plugin 2.7.0 and earlier disabled SSL/TLS and hostname verification globally for the Jenkins master JVM.
CVSS Score: 8.2 (HIGH)
CWE: CWE-295
References: https://jenkins.io/security/advisory/2019-10-16/#SECURITY-1615; https://jenkins.io/security/advisory/2019-10-16/#SECURITY-1615