Support Core (Jenkins) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 91 known versions, newest CVE from 2022-11-15. Vendor: Jenkins.

CVEs of Support Core

• CVE-2022-45383 - CVSS 6.5 (medium), 2022-11-15: An incorrect permission check in Jenkins Support Core Plugin 1206.v14049fa_b_d860 and earlier allows attackers with Support/DownloadBundle permission to…
• CVE-2022-25187 - CVSS 6.5 (medium), 2022-02-15: Jenkins Support Core Plugin 2.79 and earlier does not redact some sensitive information in the support bundle.
• CVE-2021-21621 - CVSS 5.3 (medium), 2021-02-24: Jenkins Support Core Plugin 2.72 and earlier provides the serialized user authentication as part of the "About user (basic authentication details only)"…
• CVE-2019-16540 - CVSS 6.5 (medium), 2019-11-21: A path traversal vulnerability in Jenkins Support Core Plugin 2.63 and earlier allows attackers with Overall/Read permission to delete arbitrary files on the…
• CVE-2019-16539 - CVSS 6.5 (medium), 2019-11-21: A missing permission check in Jenkins Support Core Plugin 2.63 and earlier allows attackers with Overall/Read permission to delete support bundles.