netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-3fpx-g9h3-hh8x
GHSA-gpmw-h4wq-4rch
GHSA-vv4q-2w98-4v8g
GHSA-xp44-8vwr-xwmv
This commit is contained in:
advisory-database[bot]
2024-01-30 21:19:14 +00:00
parent b2be1fd53e
commit 32f066d609
4 changed files with 104 additions and 19 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2022/05/GHSA-3fpx-g9h3-hh8x/GHSA-3fpx-g9h3-hh8x.json → advisories/github-reviewed/2022/05/GHSA-3fpx-g9h3-hh8x/GHSA-3fpx-g9h3-hh8x.json
+27 -5
View File
@@ -1,11 +1,12 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3fpx-g9h3-hh8x",
"modified": "2023-02-11T21:30:24Z",
"modified": "2024-01-30T21:17:55Z",
"published": "2022-05-24T22:00:44Z",
"aliases": [
"CVE-2019-10430"
],
"summary": "Jenkins NeuVector Vulnerability Scanner Plugin stored credentials in plain text ",
"details": "Jenkins NeuVector Vulnerability Scanner Plugin 1.5 and earlier stored credentials unencrypted in its global configuration file on the Jenkins master where they could be viewed by users with access to the master file system.",
"severity": [
{
@@ -14,7 +15,28 @@
}
],
"affected": [
{
"package": {
"ecosystem": "Maven",
"name": "io.jenkins.plugins:neuvector-vulnerability-scanner"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.6"
}
]
}
],
"database_specific": {
"last_known_affected_version_range": "<= 1.5"
}
}
],
"references": [
{
@@ -34,9 +56,9 @@
"cwe_ids": [
"CWE-312"
],
"severity": "LOW",
"github_reviewed": false,
"github_reviewed_at": null,
"severity": "MODERATE",
"github_reviewed": true,
"github_reviewed_at": "2024-01-30T21:17:55Z",
"nvd_published_at": "2019-09-25T16:15:00Z"
}
}
advisories/unreviewed/2022/05/GHSA-gpmw-h4wq-4rch/GHSA-gpmw-h4wq-4rch.json → advisories/github-reviewed/2022/05/GHSA-gpmw-h4wq-4rch/GHSA-gpmw-h4wq-4rch.json
+24 -5
View File
@@ -1,12 +1,13 @@
{
"schema_version": "1.4.0",
"id": "GHSA-gpmw-h4wq-4rch",
"modified": "2023-10-25T18:31:26Z",
"modified": "2024-01-30T21:18:51Z",
"published": "2022-05-24T16:56:45Z",
"aliases": [
"CVE-2019-10409"
],
"details": "A missing permission check in Jenkins Project Inheritance Plugin 2.0.0 and earlier allowed attackers with Overall/Read permission to trigger project generation from templates.",
"summary": "Missing permission check in Jenkins Project Inheritance Plugin",
"details": "A missing permission check in Jenkins Project Inheritance Plugin 19.08.01 and earlier allowed attackers with Overall/Read permission to trigger project generation from templates.",
"severity": [
{
"type": "CVSS_V3",
@@ -14,7 +15,25 @@
}
],
"affected": [
{
"package": {
"ecosystem": "Maven",
"name": "hudson.plugins:project-inheritance"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "19.08.02"
}
]
}
]
}
],
"references": [
{
@@ -35,8 +54,8 @@
"CWE-862"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"github_reviewed": true,
"github_reviewed_at": "2024-01-30T21:18:51Z",
"nvd_published_at": "2019-09-25T16:15:00Z"
}
}
advisories/unreviewed/2022/05/GHSA-vv4q-2w98-4v8g/GHSA-vv4q-2w98-4v8g.json → advisories/github-reviewed/2022/05/GHSA-vv4q-2w98-4v8g/GHSA-vv4q-2w98-4v8g.json
+26 -4
View File
@@ -1,11 +1,12 @@
{
"schema_version": "1.4.0",
"id": "GHSA-vv4q-2w98-4v8g",
"modified": "2023-03-01T03:30:29Z",
"modified": "2024-01-30T21:18:34Z",
"published": "2022-05-24T22:00:44Z",
"aliases": [
"CVE-2019-10427"
],
"summary": "Jenkins Aqua MicroScanner Plugin showed plain text credential in configuration form ",
"details": "Jenkins Aqua MicroScanner Plugin 1.0.7 and earlier transmitted configured credentials in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure.",
"severity": [
{
@@ -14,7 +15,28 @@
}
],
"affected": [
{
"package": {
"ecosystem": "Maven",
"name": "org.jenkins-ci.plugins:aqua-microscanner"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.0.8"
}
]
}
],
"database_specific": {
"last_known_affected_version_range": "<= 1.0.7"
}
}
],
"references": [
{
@@ -35,8 +57,8 @@
"CWE-319"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"github_reviewed": true,
"github_reviewed_at": "2024-01-30T21:18:34Z",
"nvd_published_at": "2019-09-25T16:15:00Z"
}
}
advisories/unreviewed/2022/05/GHSA-xp44-8vwr-xwmv/GHSA-xp44-8vwr-xwmv.json → advisories/github-reviewed/2022/05/GHSA-xp44-8vwr-xwmv/GHSA-xp44-8vwr-xwmv.json
+27 -5
View File
@@ -1,11 +1,12 @@
{
"schema_version": "1.4.0",
"id": "GHSA-xp44-8vwr-xwmv",
"modified": "2023-03-01T03:30:29Z",
"modified": "2024-01-30T21:18:20Z",
"published": "2022-05-24T22:00:44Z",
"aliases": [
"CVE-2019-10428"
],
"summary": "Jenkins Aqua Security Scanner Plugin showed plain text password in configuration form ",
"details": "Jenkins Aqua Security Scanner Plugin 3.0.17 and earlier transmitted configured credentials in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure.",
"severity": [
{
@@ -14,7 +15,28 @@
}
],
"affected": [
{
"package": {
"ecosystem": "Maven",
"name": "org.jenkins-ci.plugins:aqua-security-scanner"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.0.18"
}
]
}
],
"database_specific": {
"last_known_affected_version_range": "<= 3.0.17"
}
}
],
"references": [
{
@@ -34,9 +56,9 @@
"cwe_ids": [
"CWE-319"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"severity": "HIGH",
"github_reviewed": true,
"github_reviewed_at": "2024-01-30T21:18:20Z",
"nvd_published_at": "2019-09-25T16:15:00Z"
}
}