Jenkins Octopusdeploy Plugin (Jenkins Project) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2019-04-04. Vendor: Jenkins Project.

CVEs of Jenkins Octopusdeploy Plugin

• CVE-2019-1003071 - CVSS 8.8 (high), 2019-04-04: Jenkins OctopusDeploy Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with…
• CVE-2019-1003027 - CVSS 4.3 (medium), 2019-02-20: A server-side request forgery vulnerability exists in Jenkins OctopusDeploy Plugin 1.8.1 and earlier in OctopusDeployPlugin.java that allows attackers with…