Search for packages
| purl | pkg:maven/org.jenkins-ci.plugins/openshift-deployer@1.2.0 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 3.0 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-2rrx-q65f-8945
Aliases: CVE-2020-2155 |
Credentials transmitted in plain text by OpenShift Deployer Plugin OpenShift Deployer Plugin stores credentials in its global configuration file `org.jenkinsci.plugins.openshift.DeployApplication.xml` … | There are no reported fixed by versions. |
|
GHSA-m46p-rp8x-x8c4
Aliases: CVE-2019-1003081 |
CSRF vulnerability in Jenkins OpenShift Deployer Plugin A missing permission check in Jenkins OpenShift Deployer Plugin in the DeployApplication.DeployApplicationDescriptor#doCheckLogin form … | There are no reported fixed by versions. |
|
GHSA-jvjh-9r4q-8q5q
Aliases: CVE-2022-36907 |
Missing permission check in Jenkins OpenShift Deployer Plugin OpenShift Deployer Plugin 1.2.0 and earlier does not perform a permission check … | There are no reported fixed by versions. |
|
GHSA-5mv2-vqq7-mq5h
Aliases: CVE-2022-36908 |
CSRF vulnerability in Jenkins OpenShift Deployer Plugin OpenShift Deployer Plugin 1.2.0 and earlier does not perform permission checks in methods … | There are no reported fixed by versions. |
|
GHSA-78fg-pvgg-6g3r
Aliases: CVE-2022-36909 |
Missing permission check in Jenkins OpenShift Deployer Plugin OpenShift Deployer Plugin 1.2.0 and earlier does not perform permission checks in … | There are no reported fixed by versions. |
|
GHSA-8528-c6m6-gppm
Aliases: CVE-2022-36906 |
CSRF vulnerability in Jenkins OpenShift Deployer Plugin OpenShift Deployer Plugin 1.2.0 and earlier does not perform a permission check in … | There are no reported fixed by versions. |
|
GHSA-jp4r-pf5r-4wg8
Aliases: CVE-2019-1003080 |
CSRF vulnerability in Jenkins OpenShift Deployer Plugin A cross-site request forgery vulnerability in Jenkins OpenShift Deployer Plugin in the DeployApplication.DeployApplicationDescriptor#doCheckLogin … | There are no reported fixed by versions. |