Filtered by vendor Jenkins Subscriptions
Filtered by product Team Concert Subscriptions
Total 4 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2019-16566 1 Jenkins 1 Team Concert 2024-08-05 6.5 Medium
A missing permission check in Jenkins Team Concert Plugin 1.3.0 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
CVE-2019-16567 1 Jenkins 1 Team Concert 2024-08-05 4.3 Medium
A missing permission check in Jenkins Team Concert Plugin 1.3.0 and earlier in form-related methods allowed users with Overall/Read access to enumerate credentials ID of credentials stored in Jenkins.
CVE-2019-16565 1 Jenkins 1 Team Concert 2024-08-05 8.8 High
A cross-site request forgery vulnerability in Jenkins Team Concert Plugin 1.3.0 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
CVE-2023-3315 1 Jenkins 1 Team Concert 2024-08-02 4.3 Medium
Missing permission checks in Jenkins Team Concert Plugin 2.4.1 and earlier allow attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system.