Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Jenkins Team Concert Plugin unspecified Clear all filters
TI-2019-12429 CVE-2019-16567 · GHSA-wj24-xmc5-hjw4

Missing authorization in Jenkins Team Concert Plugin

Priority LOW 21

A missing permission check in Jenkins Team Concert Plugin 1.3.0 and earlier in form-related methods allowed users with Overall/Read access to enumerate credentials ID of credentials stored in Jenkins.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00647 Published 2019-12-17 No fix listed CWE-862
TI-2019-12428 CVE-2019-16566 · GHSA-c998-c4f6-vjw2

Missing authorization in Jenkins Team Concert Plugin

Priority LOW 30

A missing permission check in Jenkins Team Concert Plugin 1.3.0 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00798 Published 2019-12-17 No fix listed CWE-862
TI-2019-12427 CVE-2019-16565 · GHSA-9h9v-rfh6-jf3w

Cross-site request forgery in Jenkins Team Concert Plugin

Priority LOW 39

A cross-site request forgery vulnerability in Jenkins Team Concert Plugin 1.3.0 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another metho…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00796 Published 2019-12-17 No fix listed CWE-352