Skip to content
OpenAdvisories

Package · Maven

com.veracode.jenkins:veracode-scan

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2023-25721

    Veracode Scan Jenkins Plugin vulnerable to information disclosure

    Veracode Scan Jenkins Plugin before 23.3.19.0, when the "Connect using proxy" option is enabled and configured with proxy credentials and when the Jenkins global system setting debug is enabled and when a scan is configured for remote agent jobs, allows users…

    com.veracode.jenkins:veracode-scan Maven
  • Medium 5.5
    CVE-2023-25722

    Veracode Scan Jenkins Plugin vulnerable to information disclosure

    A credential-leak issue was discovered in related Veracode products before 2023-03-27. Veracode Scan Jenkins Plugin before 23.3.19.0, when configured for remote agent jobs, invokes the Veracode Java API Wrapper in a manner that allows local users (with OS-lev…

    com.veracode.jenkins:veracode-scan Maven