Filtered by vendor Jenkins Subscriptions
Filtered by product Anchore Container Image Scanner Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2019-16542 1 Jenkins 1 Anchore Container Image Scanner 2024-08-05 6.5 Medium
Jenkins Anchore Container Image Scanner Plugin 1.0.19 and earlier stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.
CVE-2022-41225 1 Jenkins 1 Anchore Container Image Scanner 2024-08-03 5.4 Medium
Jenkins Anchore Container Image Scanner Plugin 1.0.24 and earlier does not escape content provided by the Anchore engine API, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control API responses by Anchore engine.