Synopsys Coverity (Jenkins) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 15 known versions, newest CVE from 2023-02-15. Vendor: Jenkins.

CVEs of Synopsys Coverity

• CVE-2023-23848 - CVSS 4.3 (medium), 2023-02-15: Missing permission checks in Synopsys Jenkins Coverity Plugin 3.0.2 and earlier allow attackers with Overall/Read permission to connect to an…
• CVE-2023-23847 - CVSS 3.5 (low), 2023-02-15: A cross-site request forgery (CSRF) vulnerability in Synopsys Jenkins Coverity Plugin 3.0.2 and earlier allows attackers to connect to an attacker-specified…
• CVE-2023-23850 - CVSS 4.3 (medium), 2023-02-15: A missing permission check in Synopsys Jenkins Coverity Plugin 3.0.2 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of…