Package · Maven

org.jenkins-ci.plugins:kubernetes-cd

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium 4.3

CVE-2022-27209

Missing permission checks in Jenkins kubernetes-cd Plugin allow enumerating credentials IDs

A missing permission check in Jenkins Kubernetes Continuous Deploy Plugin 2.3.1 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.

Jenkins Project Jenkins Kubernetes Continuous Deploy Plugin org.jenkins-ci.plugins:kubernetes-cd Web / CMS Maven

Mar 15, 2022
Medium 6.5

CVE-2022-27208

Arbitrary file read vulnerability in Jenkins kubernetes-cd Plugin

Jenkins Kubernetes Continuous Deploy Plugin 2.3.1 and earlier allows users with Credentials/Create permission to read arbitrary files on the Jenkins controller.

Jenkins Project Jenkins Kubernetes Continuous Deploy Plugin org.jenkins-ci.plugins:kubernetes-cd Web / CMS Maven

Mar 15, 2022