Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Jenkins TestQuality Updater Plugin unspecified Clear all filters
TI-2023-10076 CVE-2023-24454 · GHSA-98qc-v8vg-mcx4

Cleartext storage of sensitive information in Jenkins TestQuality Updater Plugin

Priority LOW 24

Jenkins TestQuality Updater Plugin 1.3 and earlier stores the TestQuality Updater password unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00206 Published 2023-01-24 No fix listed CWE-312
TI-2023-10075 CVE-2023-24453 · GHSA-xr8h-wj4v-rx7f

Missing authorization in Jenkins TestQuality Updater Plugin

Priority LOW 30

A missing check in Jenkins TestQuality Updater Plugin 1.3 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified username and password.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00715 Published 2023-01-24 No fix listed CWE-862
TI-2023-10074 CVE-2023-24452 · GHSA-px2f-cqrf-f2qg

Cross-site request forgery in Jenkins TestQuality Updater Plugin

Priority MEDIUM 41

A cross-site request forgery (CSRF) vulnerability in Jenkins TestQuality Updater Plugin 1.3 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified username and password.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00529 Published 2023-01-24 No fix listed CWE-352