Password stored in plain text by Jenkins Proxmox Plugin

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2022-28141 · ADVISORY
• jenkinsci/proxmox-plugin · PACKAGE
• jenkins.io/security/advisory/2022-03-29 · WEB
• openwall.com/lists/oss-security/2022/03/29/1 · WEB

Lỗ hổng khác của org.jenkins-ci.plugins:proxmox

• CVE-2022-28144TRUNG BÌNH 6.5Jenkins Proxmox Plugin 0.7.0 and earlier does not perform a permission check in several HTTP endpoints, allowing attackers with Overall/Read…
• CVE-2022-28143TRUNG BÌNH 6.5A cross-site request forgery (CSRF) vulnerability in Jenkins Proxmox Plugin 0.7.0 and earlier allows attackers to connect to an attacker-spe…
• CVE-2022-28142CAO 7.5Jenkins Proxmox Plugin 0.6.0 and earlier disables SSL/TLS certificate validation globally for the Jenkins controller JVM when configured to …