Password stored in plain text by Jenkins Proxmox Plugin

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2022-28141 · ADVISORY
• jenkinsci/proxmox-plugin · PACKAGE
• jenkins.io/security/advisory/2022-03-29 · WEB
• openwall.com/lists/oss-security/2022/03/29/1 · WEB

org.jenkins-ci.plugins:proxmox のその他の脆弱性

• CVE-2022-28144中 6.5Jenkins Proxmox Plugin 0.7.0 and earlier does not perform a permission check in several HTTP endpoints, allowing attackers with Overall/Read…
• CVE-2022-28143中 6.5A cross-site request forgery (CSRF) vulnerability in Jenkins Proxmox Plugin 0.7.0 and earlier allows attackers to connect to an attacker-spe…
• CVE-2022-28142高 7.5Jenkins Proxmox Plugin 0.6.0 and earlier disables SSL/TLS certificate validation globally for the Jenkins controller JVM when configured to …