BugRater
Early access. The directory is still filling out, and every rating here comes from a researcher's reported experience.

Security releases

Jenkins

Jenkins Security Advisory 2019-04-03

2019-04-03 Apr 3, 2019 Source: Vendor

Imported by the Jenkins advisory catcher from https://www.jenkins.io/security/advisory/2019-04-03/. 59 SECURITY issues listed. Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://www.jenkins.io/security/advisory/2019-04-03/
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

59 lines
All 59 CVEs 59 Additional recognition 0 Unclaimed only
Showing 1–50 of 59 , page 1 of 2
CVE-2019-10281 BR2019-0000-019851 SECURITY-828 unclaimed
Relution Enterprise Appstore Publisher Plugin stores credentials in plain text
Credited as Viktor Gazdag
CVE-2019-1003051 BR2019-0000-019852 SECURITY-829 unclaimed
IRC Plugin stores credentials in plain text
Credited as Viktor Gazdag
CVE-2019-1003062 BR2019-0000-019853 SECURITY-830 unclaimed
AWS CloudWatch Logs Publisher Plugin stores credentials in plain text
Credited as Viktor Gazdag
CVE-2019-1003052 BR2019-0000-019854 SECURITY-831 unclaimed
AWS Elastic Beanstalk Publisher Plugin stores credentials in plain text
Credited as Viktor Gazdag
CVE-2019-1003063 BR2019-0000-019855 SECURITY-832 unclaimed
Amazon SNS Build Notifier Plugin stores credentials in plain text
Credited as Viktor Gazdag
CVE-2019-1003064 BR2019-0000-019856 SECURITY-835 unclaimed
aws-device-farm Plugin stores credentials in plain text
Credited as Viktor Gazdag
CVE-2019-1003054 BR2019-0000-019857 SECURITY-837 unclaimed
Jira Issue Updater Plugin stores credentials in plain text
Credited as Viktor Gazdag
CVE-2019-1003065 BR2019-0000-019858 SECURITY-838 unclaimed
CloudShare Docker-Machine Plugin stores credentials in plain text
Credited as Viktor Gazdag
CVE-2019-1003053 BR2019-0000-019859 SECURITY-839 unclaimed
HockeyApp Plugin stores credentials in plain text
Credited as Viktor Gazdag
CVE-2019-1003066 BR2019-0000-019860 SECURITY-841 unclaimed
Bugzilla Plugin stores credentials in plain text
Credited as Viktor Gazdag
CVE-2019-1003067 BR2019-0000-019861 SECURITY-842 unclaimed
Trac Publisher Plugin stores credentials in plain text
Credited as Viktor Gazdag
CVE-2019-10282 BR2019-0000-019862 SECURITY-843 unclaimed
Klaros-Testmanagement Plugin stores credentials in plain text
Credited as Viktor Gazdag
CVE-2019-1003068 BR2019-0000-019863 SECURITY-945 unclaimed
VMware vRealize Automation Plugin stores credentials in plain text
Credited as Viktor Gazdag
CVE-2019-10283 BR2019-0000-019864 SECURITY-946 unclaimed
mabl Plugin stores credentials in plain text
Credited as Viktor Gazdag
CVE-2019-10284 BR2019-0000-019865 SECURITY-947 unclaimed
Diawi Upload Plugin stores credentials in plain text
Credited as Viktor Gazdag
CVE-2019-1003069 BR2019-0000-019866 SECURITY-949 unclaimed
Aqua Security Scanner Plugin stores credentials in plain text
Credited as Viktor Gazdag
CVE-2019-1003070 BR2019-0000-019867 SECURITY-952 unclaimed
veracode-scanner Plugin stores credentials in plain text
Credited as Viktor Gazdag
CVE-2019-1003055 BR2019-0000-019868 SECURITY-954 unclaimed
FTP publisher Plugin stores credentials in plain text
Credited as Viktor Gazdag
CVE-2019-10285 BR2019-0000-019869 SECURITY-955 unclaimed
Minio Storage Plugin stores credentials in plain text
Credited as Viktor Gazdag
CVE-2019-1003056 BR2019-0000-019870 SECURITY-956 unclaimed
WebSphere Deployer Plugin stores credentials in plain text
Credited as Viktor Gazdag
CVE-2019-1003071 BR2019-0000-019871 SECURITY-957 unclaimed
Octopus Deploy Plugin stores credentials in plain text
Credited as Viktor Gazdag
CVE-2019-10286 BR2019-0000-019872 SECURITY-959 unclaimed
DeployHub Plugin stores credentials in plain text
Credited as Viktor Gazdag
CVE-2019-10299 BR2019-0000-019873 SECURITY-960 unclaimed
CloudCoreo DeployTime Plugin stores credentials in plain text
Credited as Viktor Gazdag
CVE-2019-1003072 BR2019-0000-019874 SECURITY-961 unclaimed
WildFly Deployer Plugin stores credentials in plain text
Credited as Viktor Gazdag
CVE-2019-1003073 BR2019-0000-019875 SECURITY-962 unclaimed
VS Team Services Continuous Deployment Plugin stores credentials in plain text
Credited as Viktor Gazdag
CVE-2019-10287 BR2019-0000-019876 SECURITY-963 unclaimed
youtrack-plugin Plugin stored credentials in plain text
Credited as Viktor Gazdag
CVE-2019-1003074 BR2019-0000-019877 SECURITY-964 unclaimed
Hyper.sh Commons Plugin stores credentials in plain text
Credited as Viktor Gazdag
CVE-2019-1003057 BR2019-0000-019878 SECURITY-965 unclaimed
Bitbucket Approve Plugin stores credentials in plain text
Credited as Viktor Gazdag
CVE-2019-1003075 BR2019-0000-019879 SECURITY-966 unclaimed
Audit to Database Plugin stores credentials in plain text
Credited as Viktor Gazdag
CVE-2019-1003058 BR2019-0000-019880 SECURITY-974 unclaimed
CSRF vulnerability and missing permission check in FTP publisher Plugin allow connecting to arbitrary FTP servers
Credited as Viktor Gazdag
CVE-2019-1003076 BR2019-0000-019881 SECURITY-977 unclaimed
CSRF vulnerability and missing permission check in Audit to Database Plugin allow connecting to arbitrary databases
Credited as Viktor Gazdag
CVE-2019-1003078 BR2019-0000-019882 SECURITY-979 unclaimed
CSRF vulnerability and missing permission check in VMware Lab Manager Slaves Plugin
Credited as Viktor Gazdag
CVE-2019-1003080 BR2019-0000-019883 SECURITY-981 unclaimed
CSRF vulnerability and missing permission check in OpenShift Deployer Plugin
Credited as Viktor Gazdag
CVE-2019-1003082 BR2019-0000-019884 SECURITY-991 unclaimed
CSRF vulnerability and missing permission check in Gearman Plugin
Credited as Viktor Gazdag
CVE-2019-1003084 BR2019-0000-019885 SECURITY-993 unclaimed
CSRF vulnerability and missing permission check in Zephyr Enterprise Test Management Plugin allow SSRF
Credited as Viktor Gazdag
CVE-2019-10288 BR2019-0000-019886 SECURITY-1031 unclaimed
Jabber Server Plugin stores credentials in plain text
Credited as Viktor Gazdag
CVE-2019-10289 BR2019-0000-019887 SECURITY-1032 unclaimed
CSRF vulnerability and missing permission check in Netsparker Enterprise Scan Plugin allowed SSRF
Credited as Viktor Gazdag
CVE-2019-1003086 BR2019-0000-019888 SECURITY-1037 unclaimed
CSRF vulnerability and missing permission check in sinatra-chef-builder Plugin allow SSRF
Credited as Viktor Gazdag
CVE-2019-10291 BR2019-0000-019889 SECURITY-1040 unclaimed
Netsparker Enterprise Scan Plugin stored credentials in plain text
Credited as Viktor Gazdag
CVE-2019-1003060 BR2019-0000-019890 SECURITY-1041 unclaimed
Official OWASP ZAP Plugin stores credentials in plain text
Credited as Viktor Gazdag
CVE-2019-1003061 BR2019-0000-019891 SECURITY-1042 unclaimed
CloudFormation Plugin stores credentials in plain text
Credited as Viktor Gazdag
CVE-2019-1003088 BR2019-0000-019892 SECURITY-1043 unclaimed
fabric-beta-publisher Plugin stores credentials in plain text
Credited as Viktor Gazdag
CVE-2019-1003089 BR2019-0000-019893 SECURITY-1044 unclaimed
Upload to pgyer Plugin stores credentials in plain text
Credited as Viktor Gazdag
CVE-2019-1003090 BR2019-0000-019894 SECURITY-1054 unclaimed
CSRF vulnerability and missing permission check in SOASTA CloudTest Plugin allow SSRF
Credited as Viktor Gazdag
CVE-2019-10292 BR2019-0000-019895 SECURITY-1055 unclaimed
CSRF vulnerability and missing permission check in kmap-jenkins Plugin allow SSRF
Credited as Viktor Gazdag
CVE-2019-10294 BR2019-0000-019896 SECURITY-1056 unclaimed
kmap-jenkins Plugin stores credentials in plain text
Credited as Viktor Gazdag
CVE-2019-1003092 BR2019-0000-019897 SECURITY-1058 unclaimed
CSRF vulnerability and missing permission check in Nomad Plugin allow SSRF
Credited as Viktor Gazdag
CVE-2019-1003094 BR2019-0000-019898 SECURITY-1059 unclaimed
Open STF Plugin stores credentials in plain text
Credited as Viktor Gazdag
CVE-2019-1003095 BR2019-0000-019899 SECURITY-1061 unclaimed
Perfecto Mobile Plugin stores credentials in plain text
Credited as Viktor Gazdag
CVE-2019-1003096 BR2019-0000-019900 SECURITY-1062 unclaimed
TestFairy Plugin stores credentials in plain text
Credited as Viktor Gazdag