Fortify Plugin stored credentials in plain text

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2020-2107 · ADVISORY
• jenkinsci/fortify-plugin · PACKAGE
• jenkins.io/security/advisory/2020-01-29 · WEB
• openwall.com/lists/oss-security/2020/01/29/1 · WEB

Lỗ hổng khác của org.jenkins-ci.plugins:fortify

• CVE-2023-4303TRUNG BÌNH 6.1Jenkins Fortify Plugin 22.1.38 and earlier does not escape the error message for a form validation method, resulting in an HTML injection vu…
• CVE-2023-4302TRUNG BÌNH 4.3A missing permission check in Jenkins Fortify Plugin 22.1.38 and earlier allows attackers with Overall/Read permission to connect to an atta…
• CVE-2023-4301TRUNG BÌNH 5.4A cross-site request forgery (CSRF) vulnerability in Jenkins Fortify Plugin 22.1.38 and earlier allows attackers to connect to an attacker-s…
• CVE-2022-25188TRUNG BÌNH 4.3Jenkins Fortify Plugin 20.2.34 and earlier does not sanitize the appName and appVersion parameters of its Pipeline steps, allowing attackers…