Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Jenkins Convertigo Mobile Platform Plugin unspecified Clear all filters
TI-2022-15116 CVE-2022-34201 · GHSA-7495-24mx-hph2

Missing authorization in Jenkins Convertigo Mobile Platform Plugin

Priority LOW 30

A missing permission check in Jenkins Convertigo Mobile Platform Plugin 1.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00636 Published 2022-06-22 No fix listed CWE-862
TI-2022-15115 CVE-2022-34200 · GHSA-24h8-cpqm-qmf3

Cross-site request forgery in Jenkins Convertigo Mobile Platform Plugin

Priority LOW 39

A cross-site request forgery (CSRF) vulnerability in Jenkins Convertigo Mobile Platform Plugin 1.1 and earlier allows attackers to connect to an attacker-specified URL.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00542 Published 2022-06-22 No fix listed CWE-352
TI-2022-15114 CVE-2022-34199 · GHSA-c8mf-mc3f-2wvc

Insufficiently protected credentials in Jenkins Convertigo Mobile Platform Plugin

Priority LOW 30

Jenkins Convertigo Mobile Platform Plugin 1.1 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the J…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00702 Published 2022-06-22 No fix listed CWE-522