diff --git a/advisories/unreviewed/2022/05/GHSA-3fpx-g9h3-hh8x/GHSA-3fpx-g9h3-hh8x.json b/advisories/github-reviewed/2022/05/GHSA-3fpx-g9h3-hh8x/GHSA-3fpx-g9h3-hh8x.json similarity index 58% rename from advisories/unreviewed/2022/05/GHSA-3fpx-g9h3-hh8x/GHSA-3fpx-g9h3-hh8x.json rename to advisories/github-reviewed/2022/05/GHSA-3fpx-g9h3-hh8x/GHSA-3fpx-g9h3-hh8x.json index f76da018e4a..98e1584833d 100644 --- a/advisories/unreviewed/2022/05/GHSA-3fpx-g9h3-hh8x/GHSA-3fpx-g9h3-hh8x.json +++ b/advisories/github-reviewed/2022/05/GHSA-3fpx-g9h3-hh8x/GHSA-3fpx-g9h3-hh8x.json @@ -1,11 +1,12 @@ { "schema_version": "1.4.0", "id": "GHSA-3fpx-g9h3-hh8x", - "modified": "2023-02-11T21:30:24Z", + "modified": "2024-01-30T21:17:55Z", "published": "2022-05-24T22:00:44Z", "aliases": [ "CVE-2019-10430" ], + "summary": "Jenkins NeuVector Vulnerability Scanner Plugin stored credentials in plain text ", "details": "Jenkins NeuVector Vulnerability Scanner Plugin 1.5 and earlier stored credentials unencrypted in its global configuration file on the Jenkins master where they could be viewed by users with access to the master file system.", "severity": [ { @@ -14,7 +15,28 @@ } ], "affected": [ - + { + "package": { + "ecosystem": "Maven", + "name": "io.jenkins.plugins:neuvector-vulnerability-scanner" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "1.6" + } + ] + } + ], + "database_specific": { + "last_known_affected_version_range": "<= 1.5" + } + } ], "references": [ { @@ -34,9 +56,9 @@ "cwe_ids": [ "CWE-312" ], - "severity": "LOW", - "github_reviewed": false, - "github_reviewed_at": null, + "severity": "MODERATE", + "github_reviewed": true, + "github_reviewed_at": "2024-01-30T21:17:55Z", "nvd_published_at": "2019-09-25T16:15:00Z" } } \ No newline at end of file diff --git a/advisories/unreviewed/2022/05/GHSA-gpmw-h4wq-4rch/GHSA-gpmw-h4wq-4rch.json b/advisories/github-reviewed/2022/05/GHSA-gpmw-h4wq-4rch/GHSA-gpmw-h4wq-4rch.json similarity index 54% rename from advisories/unreviewed/2022/05/GHSA-gpmw-h4wq-4rch/GHSA-gpmw-h4wq-4rch.json rename to advisories/github-reviewed/2022/05/GHSA-gpmw-h4wq-4rch/GHSA-gpmw-h4wq-4rch.json index 6a65d881cea..40fee8e9567 100644 --- a/advisories/unreviewed/2022/05/GHSA-gpmw-h4wq-4rch/GHSA-gpmw-h4wq-4rch.json +++ b/advisories/github-reviewed/2022/05/GHSA-gpmw-h4wq-4rch/GHSA-gpmw-h4wq-4rch.json @@ -1,12 +1,13 @@ { "schema_version": "1.4.0", "id": "GHSA-gpmw-h4wq-4rch", - "modified": "2023-10-25T18:31:26Z", + "modified": "2024-01-30T21:18:51Z", "published": "2022-05-24T16:56:45Z", "aliases": [ "CVE-2019-10409" ], - "details": "A missing permission check in Jenkins Project Inheritance Plugin 2.0.0 and earlier allowed attackers with Overall/Read permission to trigger project generation from templates.", + "summary": "Missing permission check in Jenkins Project Inheritance Plugin", + "details": "A missing permission check in Jenkins Project Inheritance Plugin 19.08.01 and earlier allowed attackers with Overall/Read permission to trigger project generation from templates.", "severity": [ { "type": "CVSS_V3", @@ -14,7 +15,25 @@ } ], "affected": [ - + { + "package": { + "ecosystem": "Maven", + "name": "hudson.plugins:project-inheritance" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "19.08.02" + } + ] + } + ] + } ], "references": [ { @@ -35,8 +54,8 @@ "CWE-862" ], "severity": "MODERATE", - "github_reviewed": false, - "github_reviewed_at": null, + "github_reviewed": true, + "github_reviewed_at": "2024-01-30T21:18:51Z", "nvd_published_at": "2019-09-25T16:15:00Z" } } \ No newline at end of file diff --git a/advisories/unreviewed/2022/05/GHSA-vv4q-2w98-4v8g/GHSA-vv4q-2w98-4v8g.json b/advisories/github-reviewed/2022/05/GHSA-vv4q-2w98-4v8g/GHSA-vv4q-2w98-4v8g.json similarity index 59% rename from advisories/unreviewed/2022/05/GHSA-vv4q-2w98-4v8g/GHSA-vv4q-2w98-4v8g.json rename to advisories/github-reviewed/2022/05/GHSA-vv4q-2w98-4v8g/GHSA-vv4q-2w98-4v8g.json index 849290edf5e..6238a757903 100644 --- a/advisories/unreviewed/2022/05/GHSA-vv4q-2w98-4v8g/GHSA-vv4q-2w98-4v8g.json +++ b/advisories/github-reviewed/2022/05/GHSA-vv4q-2w98-4v8g/GHSA-vv4q-2w98-4v8g.json @@ -1,11 +1,12 @@ { "schema_version": "1.4.0", "id": "GHSA-vv4q-2w98-4v8g", - "modified": "2023-03-01T03:30:29Z", + "modified": "2024-01-30T21:18:34Z", "published": "2022-05-24T22:00:44Z", "aliases": [ "CVE-2019-10427" ], + "summary": "Jenkins Aqua MicroScanner Plugin showed plain text credential in configuration form ", "details": "Jenkins Aqua MicroScanner Plugin 1.0.7 and earlier transmitted configured credentials in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure.", "severity": [ { @@ -14,7 +15,28 @@ } ], "affected": [ - + { + "package": { + "ecosystem": "Maven", + "name": "org.jenkins-ci.plugins:aqua-microscanner" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "1.0.8" + } + ] + } + ], + "database_specific": { + "last_known_affected_version_range": "<= 1.0.7" + } + } ], "references": [ { @@ -35,8 +57,8 @@ "CWE-319" ], "severity": "MODERATE", - "github_reviewed": false, - "github_reviewed_at": null, + "github_reviewed": true, + "github_reviewed_at": "2024-01-30T21:18:34Z", "nvd_published_at": "2019-09-25T16:15:00Z" } } \ No newline at end of file diff --git a/advisories/unreviewed/2022/05/GHSA-xp44-8vwr-xwmv/GHSA-xp44-8vwr-xwmv.json b/advisories/github-reviewed/2022/05/GHSA-xp44-8vwr-xwmv/GHSA-xp44-8vwr-xwmv.json similarity index 57% rename from advisories/unreviewed/2022/05/GHSA-xp44-8vwr-xwmv/GHSA-xp44-8vwr-xwmv.json rename to advisories/github-reviewed/2022/05/GHSA-xp44-8vwr-xwmv/GHSA-xp44-8vwr-xwmv.json index d6944c9800d..4f953df4379 100644 --- a/advisories/unreviewed/2022/05/GHSA-xp44-8vwr-xwmv/GHSA-xp44-8vwr-xwmv.json +++ b/advisories/github-reviewed/2022/05/GHSA-xp44-8vwr-xwmv/GHSA-xp44-8vwr-xwmv.json @@ -1,11 +1,12 @@ { "schema_version": "1.4.0", "id": "GHSA-xp44-8vwr-xwmv", - "modified": "2023-03-01T03:30:29Z", + "modified": "2024-01-30T21:18:20Z", "published": "2022-05-24T22:00:44Z", "aliases": [ "CVE-2019-10428" ], + "summary": "Jenkins Aqua Security Scanner Plugin showed plain text password in configuration form ", "details": "Jenkins Aqua Security Scanner Plugin 3.0.17 and earlier transmitted configured credentials in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure.", "severity": [ { @@ -14,7 +15,28 @@ } ], "affected": [ - + { + "package": { + "ecosystem": "Maven", + "name": "org.jenkins-ci.plugins:aqua-security-scanner" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "3.0.18" + } + ] + } + ], + "database_specific": { + "last_known_affected_version_range": "<= 3.0.17" + } + } ], "references": [ { @@ -34,9 +56,9 @@ "cwe_ids": [ "CWE-319" ], - "severity": "MODERATE", - "github_reviewed": false, - "github_reviewed_at": null, + "severity": "HIGH", + "github_reviewed": true, + "github_reviewed_at": "2024-01-30T21:18:20Z", "nvd_published_at": "2019-09-25T16:15:00Z" } } \ No newline at end of file