Read the docs

SonarSource

Records12All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

SonarSource records in CISA KEV

No SonarSource vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Sonarqube 6 records MEDIUM Jenkins Plugin 1 record LOW Sonarqube Docker Image 1 record MEDIUM Sonarqube Scanner 1 record LOW

Records

1 record in Jenkins Plugin · all components

TI-2013-04840 CVE-2013-5676 · GHSA-3x9h-3p7m-33m7

The Jenkins Plugin for SonarQube 3.7 and earlier allows remote authenticated users to…

Priority LOW 27

The Jenkins Plugin for SonarQube 3.7 and earlier allows remote authenticated users to obtain sensitive information (cleartext passwords) by reading the value in the sonar.sonarPassword parameter from jenkins/configure.

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.04987 Published 2013-12-13 No fix listed CWE-310
Open these records in search →