Approved changes feed: RSS · Atom

cpe:2.3:a:jenkins:reverse_proxy_auth:*:*:*:*:*:jenkins:*:*

part: a version: * update: *

VendorJenkins (d708d718-2e77-5ca3-ae9c-38ee4d256744)
ProductReverse Proxy Auth (8eb1da81-c5ac-5564-83ec-5170e91e9619)
Edition*
Language*
Software edition*
Target softwarejenkins
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-32987 vulnerable 2026-06-08 06:04:48.146148 Details available
A cross-site request forgery (CSRF) vulnerability in Jenkins Reverse Proxy Auth Plugin 1.7.4 and earlier allows attackers to connect to an attacker-specified LDAP server using attacker-specified credentials.
Published: 2023-05-16T16:00:08.216Z
Updated: 2025-01-23T16:01:46.653Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45384 vulnerable 2026-06-08 05:50:36.168014 Details available
Jenkins Reverse Proxy Auth Plugin 1.7.3 and earlier stores the LDAP manager password unencrypted in the global config.xml file on the Jenkins controller where it can be viewed by attackers with access to the Jenkins controller file system.
Published: 2022-11-15T00:00:00.000Z
Updated: 2025-04-30T17:42:25.446Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1000150 vulnerable 2026-06-08 05:10:25.538078 Details available
An exposure of sensitive information vulnerability exists in Jenkins Reverse Proxy Auth Plugin 1.5 and older in ReverseProxySecurityRealm#authContext that allows attackers with local file system access to obtain a list of authorities for logged in users.
Published: 2018-04-05T13:00:00.000Z
Updated: 2024-09-16T18:34:55.596Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.