Package · Maven

com.inflectra.spiratest.plugins:inflectra-spira-integration

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

High 8.2

CVE-2019-16558

Improper Certificate Validation in Jenkins Spira Importer Plugin

Jenkins Spira Importer Plugin 3.2.3 and earlier disables SSL/TLS certificate validation for the Jenkins master JVM.

Jenkins Project Jenkins Spira Importer Plugin com.inflectra.spiratest.plugins:inflectra-spira-integration Web / CMS Maven

Dec 17, 2019
Low —

CVE-2019-16543

Plaintext Storage in Jenkins Spira Importer Plugin

Jenkins Spira Importer Plugin 3.2.2 and earlier stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.

Jenkins Project Jenkins Spira Importer Plugin com.inflectra.spiratest.plugins:inflectra-spira-integration Web / CMS Maven

Nov 21, 2019