Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Advisory: Jenkins mabl Plugin — Jenkins Security Advisory 2023-07-12 Clear all filters
TI-2023-19385 CVE-2023-37953 · GHSA-m9jj-p947-m8xv

Missing authorization in Jenkins mabl Plugin

Priority LOW 30

A missing permission check in Jenkins mabl Plugin 0.0.46 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0067 Published 2023-07-12 Fixed in 0.0.47 CWE-862
TI-2023-19384 CVE-2023-37952 · GHSA-wvgr-5wgr-c6fj

Cross-site request forgery in Jenkins mabl Plugin

Priority LOW 29

A cross-site request forgery (CSRF) vulnerability in Jenkins mabl Plugin 0.0.46 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another metho…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00437 Published 2023-07-12 Fixed in 0.0.47 CWE-352
TI-2023-19383 CVE-2023-37951 · GHSA-4c3q-r84r-q6pp

Insufficiently protected credentials in Jenkins mabl Plugin

Priority LOW 30

Jenkins mabl Plugin 0.0.46 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0067 Published 2023-07-12 Fixed in 0.0.47 CWE-522
TI-2023-19382 CVE-2023-37950 · GHSA-23rr-6phq-5p65

Missing authorization in Jenkins mabl Plugin

Priority LOW 21

A missing permission check in Jenkins mabl Plugin 0.0.46 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00539 Published 2023-07-12 Fixed in 0.0.47 CWE-862