Filtered by vendor Jenkins Subscriptions
Filtered by product Zephyr For Jira Test Management Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2020-2216 1 Jenkins 1 Zephyr For Jira Test Management 2024-11-21 4.3 Medium
A missing permission check in Jenkins Zephyr for JIRA Test Management Plugin 1.5 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified HTTP server using attacker-specified username and password.
CVE-2020-2215 1 Jenkins 1 Zephyr For Jira Test Management 2024-11-21 4.3 Medium
A cross-site request forgery vulnerability in Jenkins Zephyr for JIRA Test Management Plugin 1.5 and earlier allows attackers to connect to an attacker-specified HTTP server using attacker-specified username and password.
CVE-2020-2154 1 Jenkins 1 Zephyr For Jira Test Management 2024-11-21 5.5 Medium
Jenkins Zephyr for JIRA Test Management Plugin 1.5 and earlier stores its credentials in plain text in a global configuration file on the Jenkins master file system.