Skip to content
OpenAdvisories

Package · Maven

org.jenkins-ci.plugins:collabnet

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Low 3.3
    CVE-2022-38665

    RabbitMQ password stored in plain text by Jenkins CollabNet Plugins Plugin

    Jenkins CollabNet Plugins Plugin 2.0.8 and earlier stores a RabbitMQ password unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system.

    Jenkins Project Jenkins CollabNet Plugins Plugin org.jenkins-ci.plugins:collabnet Web / CMS Maven
  • Medium 6.5
    CVE-2018-1000605

    Jenkins CollabNet Plugin man in the middle vulnerability

    A man in the middle vulnerability exists in Jenkins CollabNet Plugin 2.0.4 and earlier in CollabNetApp.java, CollabNetPlugin.java, CNFormFieldValidator.java that allows attackers to impersonate any service that Jenkins connects to.

    org.jenkins-ci.plugins:collabnet Maven