Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Jenkins ElasTest Plugin unspecified Clear all filters
TI-2020-02151 CVE-2020-2274 · GHSA-p9rc-x48f-582x

Cleartext storage of sensitive information in Jenkins ElasTest Plugin

Priority LOW 24

Jenkins ElasTest Plugin 1.2.1 and earlier stores its server password unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file syste…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00259 Published 2020-09-16 No fix listed CWE-312
TI-2020-02150 CVE-2020-2273 · GHSA-66rm-wg7m-8pgv

Cross-site request forgery in Jenkins ElasTest Plugin

Priority LOW 21

A cross-site request forgery (CSRF) vulnerability in Jenkins ElasTest Plugin 1.2.1 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00679 Published 2020-09-16 No fix listed CWE-352
TI-2020-02149 CVE-2020-2272 · GHSA-mr43-vf8q-q5f2

Missing authorization in Jenkins ElasTest Plugin

Priority LOW 21

A missing permission check in Jenkins ElasTest Plugin 1.2.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00656 Published 2020-09-16 No fix listed CWE-862