Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.074
Restablecer filtrosJenkins Configuration as Code Plugin has Insufficiently Protected Credentials
CSRF vulnerability and missing permission checks in Openstack Cloud Plugin allowed capturing credentials
CSRF vulnerability and missing permission checks in GitHub Plugin allowed capturing credentials
Jenkins z/OS Connector Plugin allows local attacker to retrieve configured password
Jenkins AWS CodePipeline Plugin has Insufficiently Protected Credentials
Improper authorization vulnerability in Jenkins Mesos Plugin
AWS CodeDeploy Plugin stored AWS Secret Key in plain text
Improper Authorization in Jenkins
Insufficiently Protected Credentials in Jenkins AWS CodeBuild Plugin
CSRF vulnerability and missing permission checks in Jenkins AbsInt Astrée Plugin
Jenkins Black Duck Hub Plugin allowed any user with Overall/Read to read and write its configuration
Liquibase Runner Plugin allows users to load arbitrary Java code into controller JVM
Jenkins Perforce Plugin uses ineffective credentials encryption
Jenkins vSphere Plugin incorrect authorization vulnerability
Jenkins Promoted Builds Plugin allowed unauthorized users to run some promotion processes
Jenkins Subversion Plugin Incorrect Authorization vulnerability
Incorrect Authorization in Jenkins Mercurial Plugin
Weak Password Requirements in UnboundID LDAP SDK
RubyGems Infinite Loop vulnerability
Incorrect Authorization in Jenkins Gerrit Trigger Plugin
Improper authorization in Jenkins Job and Node Ownership Plugin
Jenkins Coverity Plugin has Insufficiently Protected Credentials
Incorrect Authorization in Jenkins Gerrit Trigger Plugin
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.