Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: Jenkins CONS3RT Plugin unspecified Clear all filters
TI-2022-19765 CVE-2022-41255 · GHSA-fmq9-r4p2-8272

Insufficiently protected credentials in Jenkins CONS3RT Plugin

Priority LOW 30

Jenkins CONS3RT Plugin 1.0.0 and earlier stores Cons3rt API token unencrypted in job config.xml files on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00813 Published 2022-09-21 No fix listed CWE-522
TI-2022-19764 CVE-2022-41254 · GHSA-74x9-fhc2-p79f

Missing authorization in Jenkins CONS3RT Plugin

Priority LOW 30

Missing permission checks in Jenkins CONS3RT Plugin 1.0.0 and earlier allow attackers with Overall/Read permission to connect to an attacker-specified HTTP server using attacker-specified credentials IDs obtained through…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00813 Published 2022-09-21 No fix listed CWE-862
TI-2022-19763 CVE-2022-41253 · GHSA-48q3-5297-wmmx

Cross-site request forgery in Jenkins CONS3RT Plugin

Priority MEDIUM 41

A cross-site request forgery (CSRF) vulnerability in Jenkins CONS3RT Plugin 1.0.0 and earlier allows attackers to connect to an attacker-specified HTTP server using attacker-specified credentials IDs obtained through ano…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0057 Published 2022-09-21 No fix listed CWE-352
TI-2022-19762 CVE-2022-41252 · GHSA-p37p-wg92-2fc4

Missing authorization in Jenkins CONS3RT Plugin

Priority LOW 21

Missing permission checks in Jenkins CONS3RT Plugin 1.0.0 and earlier allows users with Overall/Read permission to enumerate credentials ID of credentials stored in Jenkins.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00654 Published 2022-09-21 No fix listed CWE-862