| Jenkins Exposure of Sensitive Information to an Unauthorized Actor vulnerabilityCVE-2014-3662 · GHSA-FXQR-PX2M-FVC2 |
org.jenkins-ci.main:jenkins-coreOpenShift Enterprise 1/jenkins |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Jenkins Cross-site Scripting vulnerabilityCVE-2014-3681 · GHSA-CWH9-F8M6-6R63 |
org.jenkins-ci.main:jenkins-coreOpenShift Enterprise 1/jenkins |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Jenkins Exposure of Sensitive Information to an Unauthorized Actor vulnerabilityCVE-2014-3680 · GHSA-8X8P-MFWV-9FJW |
org.jenkins-ci.main:jenkins-coreOpenShift Enterprise 1/jenkins |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Jenkins Path Traversal vulnerabilityCVE-2014-3664 · GHSA-3GP5-92H5-H855 |
org.jenkins-ci.main:jenkins-coreOpenShift Enterprise 1/jenkins |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Jenkins allows Remote Attackers to Hijack SessionsCVE-2014-2060 · GHSA-9C26-CF8C-MW43 |
org.jenkins-ci.main:jenkins-coreOpenShift Enterprise 1/jenkins |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Jenkins Vulnerable to ClickjackingCVE-2014-2063 · GHSA-W3F5-GQ7J-M797 |
org.jenkins-ci.main:jenkins-coreOpenShift Enterprise 1/jenkins |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Jenkins allows Remote Users to Obtain Sensitive Information from a Plugin CodeCVE-2014-3667 · GHSA-5XM3-48V5-6H7V |
org.jenkins-ci.main:jenkins-coreOpenShift Enterprise 1/jenkins |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Jenkins Monitoring Plugin allows Cross-Site Scripting (XSS)CVE-2014-3678 · GHSA-GHJW-FC9Q-JJ8C |
org.jvnet.hudson.plugins:monitoringOpenShift Enterprise 1/jenkins |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Jenkins Monitoring Plugin Reveals Sensitive Information via Unspecified PagesCVE-2014-3679 · GHSA-QWC3-P5PC-Q93H |
org.jvnet.hudson.plugins:monitoringOpenShift Enterprise 1/jenkins |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Jenkins Subversion Plugin Stores Credentials with Base64 EncodingCVE-2013-6372 · GHSA-C4FR-GX5W-8QF2 |
org.jenkins-ci.plugins:subversionOpenShift Enterprise 1/jenkins |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Jenkins allows Cross-Site Scripting (XSS) in User ConfigurationCVE-2013-5573 · GHSA-52G6-PFRQ-RXFV |
org.jenkins-ci.main:jenkins-coreOpenShift Enterprise 1/jenkins |
MavenRed Hat |
کم
|
اصلاح اعلام نشده |
|
| Jenkins allows Cross-Site Scripting (XSS) via Crafted URLCVE-2012-4439 · GHSA-X97G-3GP9-CF2P |
org.jenkins-ci.main:jenkins-coreOpenShift Enterprise 1/jenkins |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Jenkins allows Data Insertion and Execution of Code by those with Read and HTTP AccessCVE-2012-4438 · GHSA-WR6P-J63R-XQHV |
org.jenkins-ci.main:jenkins-coreOpenShift Enterprise 1/jenkins |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Jenkins improperly ensures trust separationCVE-2014-3665 · GHSA-66CR-6WHX-732P |
org.jenkins-ci.main:jenkins-coreOpenShift Enterprise 1/jenkins |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Jenkins allows attackers to configure restricted projectsCVE-2013-7330 · GHSA-H5JV-HG68-MJHG |
org.jenkins-ci.main:jenkins-coreOpenShift Enterprise 1/jenkins |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Jenkins Denial of Service vulnerabilityCVE-2014-3661 · GHSA-R5M2-G5GC-Q43R |
org.jenkins-ci.main:jenkins-coreOpenShift Enterprise 1/jenkins |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Jenkins allows remote authenticated users to bypass intended restrictions and create or destroy arbitrary jobsCVE-2014-3663 · GHSA-64MC-2M9P-23C8 |
org.jenkins-ci.main:jenkins-coreOpenShift Enterprise 1/jenkins |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Jenkins allows attackers to obtain sensitive informationCVE-2014-2068 · GHSA-PV88-J6RG-R56P |
org.jenkins-ci.main:jenkins-coreOpenShift Enterprise 1/jenkins |
MavenRed Hat |
کم
|
اصلاح گزارش شده |
|
| Jenkins session fixation vulnerabilityCVE-2014-2066 · GHSA-8JFX-H6Q2-V4G3 |
org.jenkins-ci.main:jenkins-coreOpenShift Enterprise 1/jenkins |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Jenkins cross-site scripting (XSS) vulnerabilityCVE-2014-2067 · GHSA-VJ6Q-V2H7-6Q5M |
org.jenkins-ci.main:jenkins-coreOpenShift Enterprise 1/jenkins |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
