Skip to content
OpenAdvisories

Package · Maven

org.rundeck:rundeck

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.1
    CVE-2023-48222

    Authenticated users can view or delete jobs they do not have authorization for in Rundeck

    Rundeck is an open source automation service with a web console, command line tools and a WebAPI. In affected versions access to two URLs used in both Rundeck Open Source and Process Automation products could allow authenticated users to access the URL path, …

    rundeck rundeck org.rundeck:rundeck Maven
  • High 7.5
    CVE-2022-31044

    Plaintext Storage of Keys and Passwords in Rundeck and PagerDuty Process Automation

    Rundeck is an open source automation service with a web console, command line tools and a WebAPI. The Key Storage converter plugin mechanism was not enabled correctly in Rundeck 4.2.0 and 4.2.1, resulting in use of the encryption layer for Key Storage possibl…

    rundeck rundeck org.rundeck:rundeck Maven