Convertigo Mobile Platform (Jenkins) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2022-06-23. Vendor: Jenkins.

CVEs of Convertigo Mobile Platform

• CVE-2022-34200 - CVSS 8.8 (high), 2022-06-23: A cross-site request forgery (CSRF) vulnerability in Jenkins Convertigo Mobile Platform Plugin 1.1 and earlier allows attackers to connect to an…
• CVE-2022-34199 - CVSS 6.5 (medium), 2022-06-23: Jenkins Convertigo Mobile Platform Plugin 1.1 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller where they can be…
• CVE-2022-34201 - CVSS 6.5 (medium), 2022-06-23: A missing permission check in Jenkins Convertigo Mobile Platform Plugin 1.1 and earlier allows attackers with Overall/Read permission to connect to an…
• CVE-2022-25210 - CVSS 6.5 (medium), 2022-02-15: Jenkins Convertigo Mobile Platform Plugin 1.1 and earlier uses static fields to store job configuration information, allowing attackers with Item/Configure…