com.qualys.plugins:qualys-was

2 results · Feed

• Medium 5.7
  CVE-2023-6149

  Possible XXE vulnerability in Jenkins Plugin for Qualys Web Application Security

  Qualys Jenkins Plugin for WAS prior to version and including 2.0.11 was identified to be affected by a security flaw, which was missing a permission check while performing a connectivity check to Qualys Cloud Services. This allowed any user with login access …

  Qualys Web App Scanning Connector Jenkins Plugin com.qualys.plugins:qualys-was Web / CMS Maven
  Jan 9, 2024
• Medium 4.2
  CVE-2023-39154

  Incorrect permission checks in Qualys Web App Scanning Connector Plugin allow capturing credentials

  Incorrect permission checks in Jenkins Qualys Web App Scanning Connector Plugin 2.0.10 and earlier allow attackers with global Item/Configure permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another …

  Jenkins Project Jenkins Qualys Web App Scanning Connector Plugin com.qualys.plugins:qualys-was Web / CMS Maven
  Jul 26, 2023