Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

io.jenkins.plugins:cavisson-ns-nd-integration

7 known vulnerabilities (4 high, 2 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
7 · 4 high, 2 medium
Registry
Maven Central

Advisories 7

  • Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.149 and earlier does not mask credentials displayed on the configuration…

    Affected: fixed in 4.11.0.48.

  • CVE-2022-45392Medium 6.5

    Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.143 and earlier stores passwords unencrypted in job config.xml files on the…

    Affected: fixed in 4.8.0.146.

  • Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.143 and earlier globally and unconditionally disables SSL/TLS certificate and…

    Affected: fixed in 4.8.0.146.

  • CVE-2022-41229Medium 5.4

    Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.134 and earlier does not escape configuration options of the Execute…

    Affected: fixed in 4.8.0.147.

  • A missing permission check in Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.129 and earlier allows attackers with…

    Affected: fixed in 4.8.0.130.

  • A cross-site request forgery (CSRF) vulnerability in Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.129 and earlier allows…

    Affected: fixed in 4.8.0.130.

  • Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.77 and earlier does not escape the name of NetStorm Test parameters on views…

    Affected: fixed in 4.8.0.129.