Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Jenkins Openstack Heat Plugin unspecified Clear all filters
TI-2022-17128 CVE-2022-36913 · GHSA-mr38-g7q2-x79p

Missing authorization in Jenkins Openstack Heat Plugin

Priority LOW 21

Jenkins Openstack Heat Plugin 1.5 and earlier does not perform permission checks in methods implementing form validation, allowing attackers with Overall/Read permission to check for the existence of an attacker-specifie…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00582 Published 2022-07-27 No fix listed CWE-862
TI-2022-17127 CVE-2022-36912 · GHSA-hm53-hrhh-gwfq

Missing authorization in Jenkins Openstack Heat Plugin

Priority LOW 21

A missing permission check in Jenkins Openstack Heat Plugin 1.5 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00592 Published 2022-07-27 No fix listed CWE-862
TI-2022-17126 CVE-2022-36911 · GHSA-fqhm-fjjv-7q8x

Cross-site request forgery in Jenkins Openstack Heat Plugin

Priority LOW 29

A cross-site request forgery (CSRF) vulnerability in Jenkins Openstack Heat Plugin 1.5 and earlier allows attackers to connect to an attacker-specified URL.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00454 Published 2022-07-27 No fix listed CWE-352