Weakness (CWE)

CWE-820: Missing Synchronization

Base Incomplete

The product utilizes a shared resource in a concurrent manner but does not attempt to synchronize access to the resource.

Source: MITRE CWE-820

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Low 2.6

CVE-2022-25210

Improper Synchronization in Jenkins Convertigo Mobile Platform Plugin

Jenkins Convertigo Mobile Platform Plugin 1.1 and earlier uses static fields to store job configuration information, allowing attackers with Item/Configure permission to capture passwords of the jobs that will be configured.

Jenkins Project Jenkins Convertigo Mobile Platform Plugin com.convertigo.jenkins.plugins:convertigo-mobile-platform Web / CMS Maven

Feb 15, 2022