Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Jenkins EasyQA Plugin unspecified Clear all filters
TI-2022-15119 CVE-2022-34204 · GHSA-49j4-v37g-5gg2

Missing authorization in Jenkins EasyQA Plugin

Priority LOW 21

A missing permission check in Jenkins EasyQA Plugin 1.0 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified HTTP server.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00565 Published 2022-06-22 No fix listed CWE-862
TI-2022-15118 CVE-2022-34203 · GHSA-g67p-jvvc-qf54

Cross-site request forgery in Jenkins EasyQA Plugin

Priority LOW 39

A cross-site request forgery (CSRF) vulnerability in Jenkins EasyQA Plugin 1.0 and earlier allows attackers to connect to an attacker-specified HTTP server.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00544 Published 2022-06-22 No fix listed CWE-352
TI-2022-15117 CVE-2022-34202 · GHSA-xcp5-j5fj-3xp6

Insufficiently protected credentials in Jenkins EasyQA Plugin

Priority LOW 30

Jenkins EasyQA Plugin 1.0 and earlier stores user passwords unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00721 Published 2022-06-22 No fix listed CWE-522