netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-ffv8-x822-fx73
GHSA-vc2v-34c4-vg9c
This commit is contained in:
advisory-database[bot]
2024-01-30 22:02:39 +00:00
parent ff943695bb
commit 2ec50a6086
2 changed files with 49 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2022/05/GHSA-ffv8-x822-fx73/GHSA-ffv8-x822-fx73.json → advisories/github-reviewed/2022/05/GHSA-ffv8-x822-fx73/GHSA-ffv8-x822-fx73.json
+26 -4
View File
@@ -1,11 +1,12 @@
{
"schema_version": "1.4.0",
"id": "GHSA-ffv8-x822-fx73",
"modified": "2022-05-13T01:25:15Z",
"modified": "2024-01-30T22:00:54Z",
"published": "2022-05-13T01:25:15Z",
"aliases": [
"CVE-2019-1003096"
],
"summary": "Jenkins TestFairy Plugin stores credentials in plain text",
"details": "Jenkins TestFairy Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.",
"severity": [
{
@@ -14,7 +15,28 @@
}
],
"affected": [
{
"package": {
"ecosystem": "Maven",
"name": "org.jenkins-ci.plugins:TestFairy"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.17.2"
}
]
}
],
"database_specific": {
"last_known_affected_version_range": "<= 4.16"
}
}
],
"references": [
{
@@ -39,8 +61,8 @@
"CWE-522"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"github_reviewed": true,
"github_reviewed_at": "2024-01-30T22:00:54Z",
"nvd_published_at": "2019-04-04T16:29:00Z"
}
}
advisories/unreviewed/2022/05/GHSA-vc2v-34c4-vg9c/GHSA-vc2v-34c4-vg9c.json → advisories/github-reviewed/2022/05/GHSA-vc2v-34c4-vg9c/GHSA-vc2v-34c4-vg9c.json
+23 -4
View File
@@ -1,11 +1,12 @@
{
"schema_version": "1.4.0",
"id": "GHSA-vc2v-34c4-vg9c",
"modified": "2022-05-13T01:17:42Z",
"modified": "2024-01-30T22:00:30Z",
"published": "2022-05-13T01:17:42Z",
"aliases": [
"CVE-2019-1003088"
],
"summary": "Jenkins Fabric-beta-publisher Plugin stores credentials in plain text",
"details": "Jenkins Fabric Beta Publisher Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.",
"severity": [
{
@@ -14,7 +15,25 @@
}
],
"affected": [
{
"package": {
"ecosystem": "Maven",
"name": "egor-n:fabric-beta-publisher"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"last_affected": "2.1"
}
]
}
]
}
],
"references": [
{
@@ -39,8 +58,8 @@
"CWE-311"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"github_reviewed": true,
"github_reviewed_at": "2024-01-30T22:00:21Z",
"nvd_published_at": "2019-04-04T16:29:00Z"
}
}