Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Release: Jenkins Deployment Dashboard Plugin unspecified Clear all filters
TI-2022-15606 CVE-2022-34799 · GHSA-56hc-wf49-2h96

Insufficiently protected credentials in Jenkins Deployment Dashboard Plugin

Priority LOW 21

Jenkins Deployment Dashboard Plugin 1.0.10 and earlier stores a password unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file s…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00604 Published 2022-06-30 No fix listed CWE-522
TI-2022-15605 CVE-2022-34798 · GHSA-q4mr-j6w9-r2mr

Missing authorization in Jenkins Deployment Dashboard Plugin

Priority LOW 21

Jenkins Deployment Dashboard Plugin 1.0.10 and earlier does not perform a permission check in several HTTP endpoints, allowing attackers with Overall/Read permission to connect to an attacker-specified HTTP URL using att…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00583 Published 2022-06-30 No fix listed CWE-862
TI-2022-15604 CVE-2022-34797 · GHSA-x4g7-5xrm-5wmq

Cross-site request forgery in Jenkins Deployment Dashboard Plugin

Priority LOW 21

A cross-site request forgery (CSRF) vulnerability in Jenkins Deployment Dashboard Plugin 1.0.10 and earlier allows attackers to connect to an attacker-specified HTTP URL using attacker-specified credentials.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00601 Published 2022-06-30 No fix listed CWE-352
TI-2022-15603 CVE-2022-34796 · GHSA-5mxg-p5qh-2gch

Missing authorization in Jenkins Deployment Dashboard Plugin

Priority LOW 21

A missing permission check in Jenkins Deployment Dashboard Plugin 1.0.10 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00742 Published 2022-06-30 No fix listed CWE-862
TI-2022-15602 CVE-2022-34795 · GHSA-7rrx-375m-j6cr

Cross-site scripting in Jenkins Deployment Dashboard Plugin

Priority LOW 25

Jenkins Deployment Dashboard Plugin 1.0.10 and earlier does not escape environment names on its Deployment Dashboard view, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with View…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00653 Published 2022-06-30 No fix listed CWE-79