Jenkins

Redgate Sql Change Automation

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2020-2095

  • EPSS 0.03%
  • Published 15.01.2020 16:15:14
  • Last modified 21.11.2024 05:24:35

Jenkins Redgate SQL Change Automation Plugin 2.0.4 and earlier stored an API key unencrypted in job config.xml files on the Jenkins master where they could be viewed by users with Extended Read permission, or access to the master file system.

6.5

CVE-2019-16557

  • EPSS 0.05%
  • Published 17.12.2019 15:15:17
  • Last modified 21.11.2024 04:30:49

Jenkins Redgate SQL Change Automation Plugin 2.0.3 and earlier stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.