Filtered by vendor Jenkins Subscriptions
Filtered by product Delphix Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-40345 1 Jenkins 1 Delphix 2024-11-21 6.5 Medium
Jenkins Delphix Plugin 3.0.2 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Overall/Read permission to access and capture credentials they are not entitled to.
CVE-2023-40344 1 Jenkins 1 Delphix 2024-11-21 4.3 Medium
A missing permission check in Jenkins Delphix Plugin 3.0.2 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.
CVE-2019-10453 1 Jenkins 1 Delphix 2024-11-21 7.8 High
Jenkins Delphix Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.