Archive

15 March 2022

Vulnerabilities first published on this day (UTC), newest first.

← February 2022 2022 / March /15 April 2022 →

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

Low 3.3

CVE-2022-27206

Client Secret stored in plain text by Jenkins GitLab Authentication Plugin

Jenkins GitLab Authentication Plugin 1.13 and earlier stores the GitLab client secret unencrypted in the global config.xml file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system.

Jenkins Project Jenkins Gitlab Authentication Plugin org.jenkins-ci.plugins:gitlab-oauth Web / CMS Maven

Mar 15, 2022
Low 3.3

CVE-2022-27195

Sensitive parameter values captured in build metadata files by Jenkins Parameterized Trigger Plugin

Jenkins Parameterized Trigger Plugin 2.43 and earlier captures environment variables passed to builds triggered using Jenkins Parameterized Trigger Plugin, including password parameter values, in their `build.xml` files. These values are stored unencrypted an…

Jenkins Project Jenkins Parameterized Trigger Plugin org.jenkins-ci.plugins:parameterized-trigger Web / CMS Maven

Mar 15, 2022
Low 2.4

CVE-2022-0430

Exposure of Sensitive Information to an Unauthorized Actor in httpie/httpie

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository httpie/httpie prior to 3.1.0.

httpie httpie/httpie httpie httpie Debian Ubuntu PyPI

Mar 15, 2022