Publish Advisories

GHSA-rmpj-7c96-mrg8
GHSA-3jp6-q9cg-rvgj
GHSA-fmq9-r4p2-8272
This commit is contained in:
advisory-database[bot]
2023-06-27 20:53:07 +00:00
parent 1ff3ffe78a
commit 8d4b6360de
3 changed files with 10 additions and 4 deletions
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-rmpj-7c96-mrg8",
"modified": "2022-07-19T19:43:35Z",
"modified": "2023-06-27T20:51:43Z",
"published": "2022-06-14T00:00:37Z",
"aliases": [
"CVE-2021-37404"
@@ -78,6 +78,10 @@
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2021-37404"
},
{
"type": "PACKAGE",
"url": "https://github.com/apache/hadoop"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread/2h56ztcj3ojc66qzf1nno88vjw9vd4wo"
@@ -55,6 +55,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-862",
"CWE-863"
],
"severity": "MODERATE",
@@ -1,13 +1,13 @@
{
"schema_version": "1.4.0",
"id": "GHSA-fmq9-r4p2-8272",
"modified": "2022-12-06T00:39:13Z",
"modified": "2023-06-27T20:52:17Z",
"published": "2022-09-22T00:00:26Z",
"aliases": [
"CVE-2022-41255"
],
"summary": "API token stored in plain text by Jenkins CONS3RT Plugin",
"details": "CONS3RT Plugin 1.0.0 and earlier stores Cons3rt API token unencrypted in job `config.xml` files on the Jenkins controller as part of its configuration.\n\nThis API token can be viewed by users with access to the Jenkins controller file system.",
"details": "Jenkins CONS3RT Plugin 1.0.0 and earlier stores Cons3rt API token unencrypted in job `config.xml` files on the Jenkins controller as part of its configuration.\n\nThis API token can be viewed by users with access to the Jenkins controller file system.",
"severity": [
{
"type": "CVSS_V3",
@@ -55,7 +55,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-256"
"CWE-256",
"CWE-522"
],
"severity": "LOW",
"github_reviewed": true,