Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Jenkins Project Inheritance Plugin unspecified Clear all filters
TI-2020-02075 CVE-2020-2198 · GHSA-w53q-r5cw-6vjh

Insufficiently protected credentials in Jenkins Project Inheritance Plugin

Priority LOW 30

Jenkins Project Inheritance Plugin 19.08.02 and earlier does not redact encrypted secrets in the 'getConfigAsXML' API URL when transmitting job config.xml data to users without Job/Configure.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00798 Published 2020-06-03 No fix listed CWE-522
TI-2020-02074 CVE-2020-2197 · GHSA-hj32-9mcw-5cwh

Incorrect default permissions in Jenkins Project Inheritance Plugin

Priority LOW 21

Jenkins Project Inheritance Plugin 19.08.02 and earlier does not require users to have Job/ExtendedRead permission to access Inheritance Project job configurations in XML format.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00647 Published 2020-06-03 No fix listed CWE-276