Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: Jenkins Pipeline: Phoenix AutoTest Plugin unspecified Clear all filters
TI-2022-10956 CVE-2022-28158 · GHSA-4c7h-f2j9-9c46

Missing authorization in Jenkins Pipeline: Phoenix AutoTest Plugin

Priority LOW 30

A missing permission check in Jenkins Pipeline: Phoenix AutoTest Plugin 1.3 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00751 Published 2022-03-29 No fix listed CWE-862
TI-2022-10955 CVE-2022-28157 · GHSA-62hc-f8qj-5xc3

Path traversal in Jenkins Pipeline: Phoenix AutoTest Plugin

Priority LOW 32

Jenkins Pipeline: Phoenix AutoTest Plugin 1.3 and earlier allows attackers with Item/Configure permission to upload arbitrary files from the Jenkins controller via FTP to an attacker-specified FTP server.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01432 Published 2022-03-29 No fix listed CWE-22
TI-2022-10954 CVE-2022-28156 · GHSA-6h2c-g688-q9qr

Path traversal in Jenkins Pipeline: Phoenix AutoTest Plugin

Priority LOW 32

Jenkins Pipeline: Phoenix AutoTest Plugin 1.3 and earlier allows attackers with Item/Configure permission to copy arbitrary files and directories from the Jenkins controller to the agent workspace.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0158 Published 2022-03-29 No fix listed CWE-22