Kubernetes (Jenkins) - vulnerabilities (CVEs)

7 CVEs, 0 in the last 30 days, 83 known versions, newest CVE from 2023-04-12. Vendor: Jenkins.

CVEs of Kubernetes

• CVE-2023-30513 - CVSS 7.5 (high), 2023-04-12: Jenkins Kubernetes Plugin 3909.v1f2c633e8590 and earlier does not properly mask (i.e., replace with asterisks) credentials in the build log when push mode for…
• CVE-2021-21661 - CVSS 4.3 (medium), 2021-06-10: Jenkins Kubernetes CLI Plugin 1.10.0 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission…
• CVE-2020-2307 - CVSS 4.3 (medium), 2020-11-04: Jenkins Kubernetes Plugin 1.27.3 and earlier allows low-privilege users to access possibly sensitive Jenkins controller environment variables.
• CVE-2020-2309 - CVSS 4.3 (medium), 2020-11-04: A missing/An incorrect permission check in Jenkins Kubernetes Plugin 1.27.3 and earlier allows attackers with Overall/Read permission to enumerate credentials…
• CVE-2020-2308 - CVSS 4.3 (medium), 2020-11-04: A missing permission check in Jenkins Kubernetes Plugin 1.27.3 and earlier allows attackers with Overall/Read permission to list global pod template names.
• CVE-2018-1999040 - CVSS 8.8 (high), 2018-08-01: An exposure of sensitive information vulnerability exists in Jenkins Kubernetes Plugin 1.10.1 and earlier in KubernetesCloud.java that allows attackers to…
• CVE-2018-1000187 - CVSS 6.5 (medium), 2018-06-05: A exposure of sensitive information vulnerability exists in Jenkins Kubernetes Plugin 1.7.0 and older in ContainerExecDecorator.java that results in sensitive…