Approved changes feed: RSS · Atom

cpe:2.3:a:jenkins:vmware_vrealize_codestream:*:*:*:*:*:jenkins:*:*

part: a version: * update: *

VendorJenkins (d708d718-2e77-5ca3-ae9c-38ee4d256744)
ProductVmware Vrealize Codestream (48bbb8c3-ed02-5c89-89ff-df8439ae6f18)
Edition*
Language*
Software edition*
Target softwarejenkins
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/jenkinsci/vmware-vrealize-codestream-plugin purl2cpe 2026-06-01 10:14:09.787001

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-27217 vulnerable 2026-06-08 05:41:55.014322 Details available
Jenkins Vmware vRealize CodeStream Plugin 1.2 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system.
Published: 2022-03-15T16:46:10.000Z
Updated: 2024-08-03T05:25:32.347Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.