Kubernetes Ci (Jenkins) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 6 known versions, newest CVE from 2020-07-02. Vendor: Jenkins.

CVEs of Kubernetes Ci

• CVE-2020-2211 - CVSS 8.8 (high), 2020-07-02: Jenkins ElasticBox Jenkins Kubernetes CI/CD Plugin 1.3 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types,…
• CVE-2019-10470 - CVSS 6.5 (medium), 2019-10-23: A missing permission check in Jenkins ElasticBox Jenkins Kubernetes CI/CD Plugin in form-related methods allowed users with Overall/Read access to enumerate…
• CVE-2019-10469 - CVSS 6.5 (medium), 2019-10-23: A missing permission check in Jenkins ElasticBox Jenkins Kubernetes CI/CD Plugin allows attackers with Overall/Read permission to connect to an…
• CVE-2019-10468 - CVSS 8.8 (high), 2019-10-23: A cross-site request forgery vulnerability in Jenkins ElasticBox Jenkins Kubernetes CI/CD Plugin allows attackers to connect to an attacker-specified URL…