Jenkins Kubernetes Continuous Deploy Plugin

2 results · Clear filters · Feed

• Medium 4.3
  CVE-2022-27209

  Missing permission checks in Jenkins kubernetes-cd Plugin allow enumerating credentials IDs

  A missing permission check in Jenkins Kubernetes Continuous Deploy Plugin 2.3.1 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.

  Jenkins Project Jenkins Kubernetes Continuous Deploy Plugin org.jenkins-ci.plugins:kubernetes-cd Web / CMS Maven
  Mar 15, 2022
• Medium 6.5
  CVE-2022-27208

  Arbitrary file read vulnerability in Jenkins kubernetes-cd Plugin

  Jenkins Kubernetes Continuous Deploy Plugin 2.3.1 and earlier allows users with Credentials/Create permission to read arbitrary files on the Jenkins controller.

  Jenkins Project Jenkins Kubernetes Continuous Deploy Plugin org.jenkins-ci.plugins:kubernetes-cd Web / CMS Maven
  Mar 15, 2022