Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Jenkins RQM Plugin unspecified Clear all filters
TI-2022-15617 CVE-2022-34810 · GHSA-2348-ccqj-8p27

Missing authorization in Jenkins RQM Plugin

Priority LOW 30

A missing check in Jenkins RQM Plugin 2.8 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00745 Published 2022-06-30 No fix listed CWE-862
TI-2022-15616 CVE-2022-34809 · GHSA-m59q-vgq9-75cr

Insufficiently protected credentials in Jenkins RQM Plugin

Priority LOW 30

Jenkins RQM Plugin 2.8 and earlier stores a password unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00745 Published 2022-06-30 No fix listed CWE-522