Jenkins Kubernetes Plugin (Jenkins Project) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2023-04-12. Vendor: Jenkins Project.

CVEs of Jenkins Kubernetes Plugin

• CVE-2023-30513 - CVSS 7.5 (high), 2023-04-12: Jenkins Kubernetes Plugin 3909.v1f2c633e8590 and earlier does not properly mask (i.e., replace with asterisks) credentials in the build log when push mode for…
• CVE-2020-2309 - CVSS 4.3 (medium), 2020-11-04: A missing/An incorrect permission check in Jenkins Kubernetes Plugin 1.27.3 and earlier allows attackers with Overall/Read permission to enumerate credentials…
• CVE-2020-2308 - CVSS 4.3 (medium), 2020-11-04: A missing permission check in Jenkins Kubernetes Plugin 1.27.3 and earlier allows attackers with Overall/Read permission to list global pod template names.
• CVE-2020-2307 - CVSS 4.3 (medium), 2020-11-04: Jenkins Kubernetes Plugin 1.27.3 and earlier allows low-privilege users to access possibly sensitive Jenkins controller environment variables.