Jenkins Support Core Plugin stores sensitive data in plain text

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2022-25187 · ADVISORY
• jenkinsci/support-core-plugin commit c6d20da · WEB
• jenkinsci/support-core-plugin commit e90487a · WEB
• jenkinsci/support-core-plugin · PACKAGE
• jenkins.io/security/advisory/2022-02-15 · WEB

Lỗ hổng khác của org.jenkins-ci.plugins:support-core

• CVE-2022-45383TRUNG BÌNH 6.5An incorrect permission check in Jenkins Support Core Plugin 1206.v14049fa_b_d860 and earlier allows attackers with Support/DownloadBundle p…
• CVE-2021-21621TRUNG BÌNH 5.3Jenkins Support Core Plugin 2.72 and earlier provides the serialized user authentication as part of the "About user (basic authentication de…
• CVE-2019-16540TRUNG BÌNH 6.5A path traversal vulnerability in Jenkins Support Core Plugin 2.63 and earlier allows attackers with Overall/Read permission to delete arbit…
• CVE-2019-16539TRUNG BÌNH 6.5A missing permission check in Jenkins Support Core Plugin 2.63 and earlier allows attackers with Overall/Read permission to delete support b…