org.jenkins-ci.plugins:vmanager-plugin

2 results · Clear filters · Feed

• High 8.0
  CVE-2020-2243

  Stored XSS vulnerability in Jenkins Cadence vManager Plugin

  Jenkins Cadence vManager Plugin 3.0.4 and earlier does not escape build descriptions in tooltips, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Run/Update permission.

  Jenkins Project Jenkins Cadence vManager Plugin org.jenkins-ci.plugins:vmanager-plugin Web / CMS Maven
  Sep 1, 2020
• High 8.2
  CVE-2019-10446

  Jenkins Cadence vManager Plugin disables SSL/TLS and hostname verification

  Jenkins Cadence vManager Plugin 2.7.0 and earlier disabled SSL/TLS and hostname verification globally for the Jenkins master JVM.

  Jenkins Project Jenkins Cadence vManager Plugin org.jenkins-ci.plugins:vmanager-plugin Web / CMS Maven
  Oct 16, 2019