Jenkins Proxmox Plugin (Jenkins Project) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2022-03-29. Vendor: Jenkins Project.

CVEs of Jenkins Proxmox Plugin

• CVE-2022-28144 - CVSS 6.5 (medium), 2022-03-29: Jenkins Proxmox Plugin 0.7.0 and earlier does not perform a permission check in several HTTP endpoints, allowing attackers with Overall/Read permission to…
• CVE-2022-28143 - CVSS 6.5 (medium), 2022-03-29: A cross-site request forgery (CSRF) vulnerability in Jenkins Proxmox Plugin 0.7.0 and earlier allows attackers to connect to an attacker-specified host using…
• CVE-2022-28142 - CVSS 7.5 (high), 2022-03-29: Jenkins Proxmox Plugin 0.6.0 and earlier disables SSL/TLS certificate validation globally for the Jenkins controller JVM when configured to ignore SSL/TLS…
• CVE-2022-28141 - CVSS 6.5 (medium), 2022-03-29: Jenkins Proxmox Plugin 0.5.0 and earlier stores the Proxmox Datacenter password unencrypted in the global config.xml file on the Jenkins controller where it…