Stored XSS vulnerability in Jenkins Cadence vManager Plugin

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2020-2243 · ADVISORY
• jenkinsci/vmanager-plugin · PACKAGE
• jenkins.io/security/advisory/2020-09-01 · WEB
• openwall.com/lists/oss-security/2020/09/01/3 · WEB

org.jenkins-ci.plugins:vmanager-plugin のその他の脆弱性

• CVE-2025-47887中 4.3Missing permission checks in Jenkins Cadence vManager Plugin 4.0.1-286.v9e25a_740b_a_48 and earlier allows attackers with Overall/Read permi…
• CVE-2025-47886中 4.3A cross-site request forgery (CSRF) vulnerability in Jenkins Cadence vManager Plugin 4.0.1-286.v9e25a_740b_a_48 and earlier allows attackers…
• CVE-2025-31724中 4.3Jenkins Cadence vManager Plugin 4.0.0-282.v5096a_c2db_275 and earlier stores Verisium Manager vAPI keys unencrypted in job config.xml files …
• CVE-2019-10446高 8.2Jenkins Cadence vManager Plugin 2.7.0 and earlier disabled SSL/TLS and hostname verification globally for the Jenkins master JVM.