Filtered by vendor Jenkins Subscriptions
Filtered by product Debian Package Builder Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2020-2125 1 Jenkins 1 Debian Package Builder 2024-08-04 4.3 Medium
Jenkins Debian Package Builder Plugin 1.6.11 and earlier stores a GPG passphrase unencrypted in its global configuration file on the Jenkins master where it can be viewed by users with access to the master file system.
CVE-2022-23118 1 Jenkins 1 Debian Package Builder 2024-08-03 8.8 High
Jenkins Debian Package Builder Plugin 1.6.11 and earlier implements functionality that allows agents to invoke command-line `git` at an attacker-specified path on the controller, allowing attackers able to control agent processes to invoke arbitrary OS commands on the controller.