| Package | Affected versions | Patched versions |
|---|---|---|
| com.convertigo.jenkins.plugins:convertigo-mobile-platform | ≤ 1.1 | |
| convertigo mobile platform | ≤ 1.1 |
Jenkins Convertigo Mobile Platform Plugin 1.1 and earlier uses static fields to store job configuration information, allowing attackers with Item/Configure permission to capture passwords of the jobs that will be configured.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free