Jenkins

Openshift Deployer

7 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.5

CVE-2022-36906

  • EPSS 0.06%
  • Published 27.07.2022 15:15:10
  • Last modified 21.11.2024 07:14:03

A cross-site request forgery (CSRF) vulnerability in Jenkins OpenShift Deployer Plugin 1.2.0 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified username and password.

6.5

CVE-2022-36907

  • EPSS 0.4%
  • Published 27.07.2022 15:15:10
  • Last modified 21.11.2024 07:14:03

A missing permission check in Jenkins OpenShift Deployer Plugin 1.2.0 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified username and password.

6.5

CVE-2022-36908

  • EPSS 0.06%
  • Published 27.07.2022 15:15:10
  • Last modified 21.11.2024 07:14:03

A cross-site request forgery (CSRF) vulnerability in Jenkins OpenShift Deployer Plugin 1.2.0 and earlier allows attackers to check for the existence of an attacker-specified file path on the Jenkins controller file system and to upload a SSH key file...

6.5

CVE-2022-36909

  • EPSS 0.4%
  • Published 27.07.2022 15:15:10
  • Last modified 21.11.2024 07:14:03

A missing permission check in Jenkins OpenShift Deployer Plugin 1.2.0 and earlier allows attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system and to upload a SSH ke...

5.3

CVE-2020-2155

  • EPSS 0.03%
  • Published 09.03.2020 16:15:14
  • Last modified 21.11.2024 05:24:48

Jenkins OpenShift Deployer Plugin 1.2.0 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure.

6.5

CVE-2019-1003080

  • EPSS 0.14%
  • Published 04.04.2019 16:29:01
  • Last modified 21.11.2024 04:17:52

A cross-site request forgery vulnerability in Jenkins OpenShift Deployer Plugin in the DeployApplication.DeployApplicationDescriptor#doCheckLogin form validation method allows attackers to initiate a connection to an attacker-specified server.

6.5

CVE-2019-1003081

  • EPSS 0.08%
  • Published 04.04.2019 16:29:01
  • Last modified 21.11.2024 04:17:52

A missing permission check in Jenkins OpenShift Deployer Plugin in the DeployApplication.DeployApplicationDescriptor#doCheckLogin form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified s...