Jenkins

Debian Package Builder

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9

CVE-2022-23118

  • EPSS 5.46%
  • Published 12.01.2022 20:15:09
  • Last modified 21.11.2024 06:48:01

Jenkins Debian Package Builder Plugin 1.6.11 and earlier implements functionality that allows agents to invoke command-line `git` at an attacker-specified path on the controller, allowing attackers able to control agent processes to invoke arbitrary ...

4.3

CVE-2020-2125

  • EPSS 0.03%
  • Published 12.02.2020 15:15:13
  • Last modified 21.11.2024 05:24:43

Jenkins Debian Package Builder Plugin 1.6.11 and earlier stores a GPG passphrase unencrypted in its global configuration file on the Jenkins master where it can be viewed by users with access to the master file system.