Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: Jenkins JIRA Pipeline Steps Plugin unspecified Clear all filters
TI-2023-10061 CVE-2023-24439 · GHSA-g29v-5pwh-wxx4

Cleartext storage of sensitive information in Jenkins JIRA Pipeline Steps Plugin

Priority LOW 24

Jenkins JIRA Pipeline Steps Plugin 2.0.165.v8846cf59f3db and earlier stores the private keys unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenki…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00206 Published 2023-01-24 No fix listed CWE-312
TI-2023-10060 CVE-2023-24438 · GHSA-6j27-3xfw-cj2w

Missing authorization in Jenkins JIRA Pipeline Steps Plugin

Priority LOW 30

A missing permission check in Jenkins JIRA Pipeline Steps Plugin 2.0.165.v8846cf59f3db and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credential…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00782 Published 2023-01-24 No fix listed CWE-862
TI-2023-10059 CVE-2023-24437 · GHSA-r3gm-jwf4-xgv2

Cross-site request forgery in Jenkins JIRA Pipeline Steps Plugin

Priority MEDIUM 41

A cross-site request forgery (CSRF) vulnerability in Jenkins JIRA Pipeline Steps Plugin 2.0.165.v8846cf59f3db and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00529 Published 2023-01-24 No fix listed CWE-352