Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.jenkins-ci.plugins/openshift-deployer@1.2.0
purl pkg:maven/org.jenkins-ci.plugins/openshift-deployer@1.2.0
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 3.0
Vulnerabilities affecting this package (7)
Advisory Summary Fixed in package version
GHSA-2rrx-q65f-8945
Aliases:
CVE-2020-2155
Credentials transmitted in plain text by OpenShift Deployer Plugin OpenShift Deployer Plugin stores credentials in its global configuration file `org.jenkinsci.plugins.openshift.DeployApplication.xml` … There are no reported fixed by versions.
GHSA-m46p-rp8x-x8c4
Aliases:
CVE-2019-1003081
CSRF vulnerability in Jenkins OpenShift Deployer Plugin A missing permission check in Jenkins OpenShift Deployer Plugin in the DeployApplication.DeployApplicationDescriptor#doCheckLogin form … There are no reported fixed by versions.
GHSA-jvjh-9r4q-8q5q
Aliases:
CVE-2022-36907
Missing permission check in Jenkins OpenShift Deployer Plugin OpenShift Deployer Plugin 1.2.0 and earlier does not perform a permission check … There are no reported fixed by versions.
GHSA-5mv2-vqq7-mq5h
Aliases:
CVE-2022-36908
CSRF vulnerability in Jenkins OpenShift Deployer Plugin OpenShift Deployer Plugin 1.2.0 and earlier does not perform permission checks in methods … There are no reported fixed by versions.
GHSA-78fg-pvgg-6g3r
Aliases:
CVE-2022-36909
Missing permission check in Jenkins OpenShift Deployer Plugin OpenShift Deployer Plugin 1.2.0 and earlier does not perform permission checks in … There are no reported fixed by versions.
GHSA-8528-c6m6-gppm
Aliases:
CVE-2022-36906
CSRF vulnerability in Jenkins OpenShift Deployer Plugin OpenShift Deployer Plugin 1.2.0 and earlier does not perform a permission check in … There are no reported fixed by versions.
GHSA-jp4r-pf5r-4wg8
Aliases:
CVE-2019-1003080
CSRF vulnerability in Jenkins OpenShift Deployer Plugin A cross-site request forgery vulnerability in Jenkins OpenShift Deployer Plugin in the DeployApplication.DeployApplicationDescriptor#doCheckLogin … There are no reported fixed by versions.
This package is not known to fix any advisories.