Jenkins

Ansible

4 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2023-32982

  • EPSS 0.08%
  • Published 16.05.2023 16:15:10
  • Last modified 23.01.2025 21:15:11

Jenkins Ansible Plugin 204.v8191fd551eb_f and earlier stores extra variables unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file s...

5.3

CVE-2023-32983

  • EPSS 0.08%
  • Published 16.05.2023 16:15:10
  • Last modified 23.01.2025 21:15:12

Jenkins Ansible Plugin 204.v8191fd551eb_f and earlier does not mask extra variables displayed on the configuration form, increasing the potential for attackers to observe and capture them.

4.3

CVE-2020-2310

  • EPSS 0.07%
  • Published 04.11.2020 15:15:11
  • Last modified 21.11.2024 05:25:16

Missing permission checks in Jenkins Ansible Plugin 1.0 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.

6.8

CVE-2018-1000149

  • EPSS 0.07%
  • Published 05.04.2018 13:29:00
  • Last modified 21.11.2024 03:39:47

A man in the middle vulnerability exists in Jenkins Ansible Plugin 0.8 and older in AbstractAnsibleInvocation.java, AnsibleAdHocCommandBuilder.java, AnsibleAdHocCommandInvocationTest.java, AnsibleContext.java, AnsibleJobDslExtension.java, AnsiblePlay...