org.jenkins-ci.plugins:kubernetes-cd

4 results · Feed

• High 7.1
  CVE-2022-27211

  CSRF vulnerability and missing permission checks in Jenkins kubernetes-cd Plugin allow capturing credentials

  A missing permission check in Jenkins Kubernetes Continuous Deploy Plugin 2.3.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified SSH server using attacker-specified credentials IDs obtained through another method, …

  Jenkins Project Jenkins Kubernetes Continuous Deploy Plugin org.jenkins-ci.plugins:kubernetes-cd Web / CMS Maven
  Mar 15, 2022
• High 7.1
  CVE-2022-27210

  CSRF vulnerability in Jenkins kubernetes-cd Plugin allow capturing credentials

  A cross-site request forgery (CSRF) vulnerability in Jenkins Kubernetes Continuous Deploy Plugin 2.3.1 and earlier allows attackers to connect to an attacker-specified SSH server using attacker-specified credentials IDs obtained through another method, captur…

  Jenkins Project Jenkins Kubernetes Continuous Deploy Plugin org.jenkins-ci.plugins:kubernetes-cd Web / CMS Maven
  Mar 15, 2022
• Medium 4.3
  CVE-2022-27209

  Missing permission checks in Jenkins kubernetes-cd Plugin allow enumerating credentials IDs

  A missing permission check in Jenkins Kubernetes Continuous Deploy Plugin 2.3.1 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.

  Jenkins Project Jenkins Kubernetes Continuous Deploy Plugin org.jenkins-ci.plugins:kubernetes-cd Web / CMS Maven
  Mar 15, 2022
• Medium 6.5
  CVE-2022-27208

  Arbitrary file read vulnerability in Jenkins kubernetes-cd Plugin

  Jenkins Kubernetes Continuous Deploy Plugin 2.3.1 and earlier allows users with Credentials/Create permission to read arbitrary files on the Jenkins controller.

  Jenkins Project Jenkins Kubernetes Continuous Deploy Plugin org.jenkins-ci.plugins:kubernetes-cd Web / CMS Maven
  Mar 15, 2022