Stored XSS vulnerability in Jenkins Cadence vManager Plugin

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2020-2243 · ADVISORY
• jenkinsci/vmanager-plugin · PACKAGE
• jenkins.io/security/advisory/2020-09-01 · WEB
• openwall.com/lists/oss-security/2020/09/01/3 · WEB

Lỗ hổng khác của org.jenkins-ci.plugins:vmanager-plugin

• CVE-2025-47887TRUNG BÌNH 4.3Missing permission checks in Jenkins Cadence vManager Plugin 4.0.1-286.v9e25a_740b_a_48 and earlier allows attackers with Overall/Read permi…
• CVE-2025-47886TRUNG BÌNH 4.3A cross-site request forgery (CSRF) vulnerability in Jenkins Cadence vManager Plugin 4.0.1-286.v9e25a_740b_a_48 and earlier allows attackers…
• CVE-2025-31724TRUNG BÌNH 4.3Jenkins Cadence vManager Plugin 4.0.0-282.v5096a_c2db_275 and earlier stores Verisium Manager vAPI keys unencrypted in job config.xml files …
• CVE-2019-10446CAO 8.2Jenkins Cadence vManager Plugin 2.7.0 and earlier disabled SSL/TLS and hostname verification globally for the Jenkins master JVM.