Vendor/product archive

jenkins / coverity CVEs

Beta · best-effort

4 CVEs tagged to jenkins / coverity — 0 Critical, 3 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to jenkins vendor archive

CVE-2022-36921

Published Jul 27, 2022

A missing permission check in Jenkins Coverity Plugin 1.11.4 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-speci…

CVSS 8.1 · High

Vendor/product tagsBeta · best-effort

CVE-2022-36920

Published Jul 27, 2022

A cross-site request forgery (CSRF) vulnerability in Jenkins Coverity Plugin 1.11.4 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified c…

CVSS 8.8 · High

Vendor/product tagsBeta · best-effort

CVE-2022-36919

Published Jul 27, 2022

A missing permission check in Jenkins Coverity Plugin 1.11.4 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkin…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2018-1000104

Published Mar 13, 2018

A plaintext storage of a password vulnerability exists in Jenkins Coverity Plugin 1.10.0 and earlier in CIMInstance.java that allows an attacker with local file system access or c…

CVSS 7.8 · High

Vendor/product tagsBeta · best-effort

Showing 1-4 of 4 CVEsPage 1 of 1