org.jenkins-ci.plugins:vmanager-plugin

3 results · Clear filters · Feed

• Medium 4.3
  CVE-2025-47886

  Jenkins Cadence vManager Plugin Vulnerable to Cross-Site Request Forgery

  A cross-site request forgery (CSRF) vulnerability in Jenkins Cadence vManager Plugin 4.0.1-286.v9e25a_740b_a_48 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified username and password.

  Jenkins Project Jenkins Cadence vManager Plugin org.jenkins-ci.plugins:vmanager-plugin Web / CMS Maven
  May 14, 2025
• Medium 4.3
  CVE-2025-47887

  Jenkins Cadence vManager Plugin is Missing Permission Checks

  Missing permission checks in Jenkins Cadence vManager Plugin 4.0.1-286.v9e25a_740b_a_48 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified username and password.

  Jenkins Project Jenkins Cadence vManager Plugin org.jenkins-ci.plugins:vmanager-plugin Web / CMS Maven
  May 14, 2025
• Medium 4.3
  CVE-2025-31724

  Jenkins Cadence vManager Plugin Stores Verisium Manager vAPI keys Unencrypted

  Jenkins Cadence vManager Plugin 4.0.0-282.v5096a_c2db_275 and earlier stores Verisium Manager vAPI keys unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins con…

  Jenkins Project Jenkins Cadence vManager Plugin org.jenkins-ci.plugins:vmanager-plugin Web / CMS Maven
  Apr 2, 2025