Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: Jenkins Delphix Plugin — Jenkins Security Advisory 2023-08-16 Clear all filters
TI-2023-21174 CVE-2023-40345 · GHSA-wwww-xvm2-62w7

Insufficiently protected credentials in Jenkins Delphix Plugin

Priority LOW 31

Jenkins Delphix Plugin 3.0.2 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Overall/Read permission to access and capture credentials they are not entitled to.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00953 Published 2023-08-16 Fixed in 3.0.3 CWE-522
TI-2023-21173 CVE-2023-40344 · GHSA-3fqw-j7x8-g75j

Missing authorization in Jenkins Delphix Plugin

Priority LOW 21

A missing permission check in Jenkins Delphix Plugin 3.0.2 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00653 Published 2023-08-16 Fixed in 3.0.3 CWE-862