Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Jenkins WebSphere Deployer Plugin unspecified Clear all filters
TI-2019-12423 CVE-2019-16561 · GHSA-46rr-87h4-f5q6

Improper certificate validation in Jenkins WebSphere Deployer Plugin

Priority LOW 32

Jenkins WebSphere Deployer Plugin 1.6.1 and earlier allows users with Overall/Read access to disable SSL/TLS certificate and hostname validation for the entire Jenkins master JVM.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.0051 Published 2019-12-17 No fix listed CWE-295
TI-2019-12422 CVE-2019-16560 · GHSA-c3wf-rrhq-rfp2

Cross-site request forgery in Jenkins WebSphere Deployer Plugin

Priority MEDIUM 40

A cross-site request forgery vulnerability in Jenkins WebSphere Deployer Plugin 1.6.1 and earlier allows attackers to perform connection tests and determine whether files with an attacker-specified path exist on the Jenk…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00859 Published 2019-12-17 No fix listed CWE-352
TI-2019-12421 CVE-2019-16559 · GHSA-mxf8-grm7-mvqw

Incorrect default permissions in Jenkins WebSphere Deployer Plugin

Priority LOW 26

A missing permission check in Jenkins WebSphere Deployer Plugin 1.6.1 and earlier allows attackers with Overall/Read permission to perform connection tests and determine whether files with an attacker-specified path exis…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00676 Published 2019-12-17 No fix listed CWE-276