Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.jenkins-ci.plugins:credentials

5 known vulnerabilities (1 high), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
5 · 1 high
Registry
Maven Central

Advisories 5

  • Jenkins Credentials Plugin 1380.va_435002fa_924 and earlier, except 1371.1373.v4eb_fa_b_7161e9, does not redact encrypted values of…

    Affected: from 1372, fixed in 1381.v2c3a; fixed in 1371.1373.v4eb.

  • Jenkins Credentials Plugin 1111.v35a_307992395 and earlier, except 1087.1089.v2f1b_9a_b_040e4, 1074.1076.v39c30cecb_0e2, and 2.6.1.1, does…

    Affected: fixed in 2.6.1.1; from 2.6.2, fixed in 1074.1076.v39c30cecb_0e2; from 1087.v16065d268466, fixed in 1087.1089.v2f1b_9a_b_040e4; from 1105, through 1111.v35a.

  • Jenkins Credentials Plugin 2.3.18 and earlier does not escape user-controlled information on a view it provides, resulting in a reflected…

    Affected: from 2.3.16, fixed in 2.3.19; from 2.3.15, fixed in 2.3.15.1; from 2.3.14, fixed in 2.3.14.1; from 2.3.8, fixed in 2.3.13.1; from 2.3.1, fixed in 2.3.7.1; fixed in 2.3.0.1.

  • Jenkins Credentials Plugin 2.1.18 and earlier allowed users with permission to create or update credentials to confirm the existence of…

    Affected: fixed in 2.1.19.

  • A arbitrary file read vulnerability exists in Jenkins SSH Credentials Plugin 1.13 and earlier in BasicSSHUserPrivateKey.java that allows…

    Affected: fixed in 2.1.17.