Jenkins TraceTronic ECU-TEST Plugin Man in the middle vulnerability

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2018-1999025 · ADVISORY
• jenkinsci/ecutest-plugin commit d2b730c · WEB
• jenkinsci/ecutest-plugin · PACKAGE
• jenkins.io/security/advisory/2018-07-30 · WEB

de.tracetronic.jenkins.plugins:ecutest のその他の脆弱性

• CVE-2021-21612中 5.5Jenkins TraceTronic ECU-TEST Plugin 2.23.1 and earlier stores credentials unencrypted in its global configuration file on the Jenkins contro…
• CVE-2018-1999026中 6.5A server-side request forgery vulnerability exists in Jenkins TraceTronic ECU-TEST Plugin 2.3 and earlier in ATXPublisher.java that allows a…