netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-49v8-p6mm-3pfj
GHSA-x9hj-q7xv-fv4v
This commit is contained in:
advisory-database[bot]
2025-04-13 05:13:21 +00:00
parent 1629678b04
commit fbef3ace5c
2 changed files with 5 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2025/04/GHSA-49v8-p6mm-3pfj/GHSA-49v8-p6mm-3pfj.json
+3 -3
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-49v8-p6mm-3pfj",
"modified": "2025-04-02T22:50:37Z",
"modified": "2025-04-02T22:52:28Z",
"published": "2025-04-02T21:30:51Z",
"aliases": [
"CVE-2025-29085"
@@ -11,7 +11,7 @@
"severity": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N"
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P"
}
],
"affected": [
@@ -53,7 +53,7 @@
"cwe_ids": [
"CWE-89"
],
"severity": "MODERATE",
"severity": "HIGH",
"github_reviewed": true,
"github_reviewed_at": "2025-04-02T22:50:37Z",
"nvd_published_at": "2025-04-02T21:15:32Z"
advisories/github-reviewed/2025/04/GHSA-x9hj-q7xv-fv4v/GHSA-x9hj-q7xv-fv4v.json
+2 -2
View File
@@ -1,13 +1,13 @@
{
"schema_version": "1.4.0",
"id": "GHSA-x9hj-q7xv-fv4v",
"modified": "2025-04-02T22:45:33Z",
"modified": "2025-04-02T22:46:51Z",
"published": "2025-04-02T15:31:38Z",
"aliases": [
"CVE-2025-31724"
],
"summary": "Jenkins Cadence vManager Plugin Stores Verisium Manager vAPI keys Unencrypted",
"details": "Jenkins Cadence vManager Plugin 4.0.0-282.v5096a_c2db_275 and earlier stores Verisium Manager vAPI keys unencrypted in job config.xml files on the Jenkins controller as part of its configuration.\n\nThese API keys can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.\n\nCadence vManager Plugin 4.0.1-286.v9e25a_740b_a_48 stores Verisium Manager vAPI keys encrypted once affected job configurations are saved again.",
"details": "Jenkins Cadence vManager Plugin 4.0.0-282.v5096a_c2db_275 and earlier stores Verisium Manager vAPI keys unencrypted in job `config.xml` files on the Jenkins controller as part of its configuration.\n\nThese API keys can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.\n\nCadence vManager Plugin 4.0.1-286.v9e25a_740b_a_48 stores Verisium Manager vAPI keys encrypted once affected job configurations are saved again.",
"severity": [
{
"type": "CVSS_V3",