GCVE - cpe:2.3:a:jenkins:kubernetes:*:*:*:*:*:jenkins:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:jenkins:kubernetes:*:*:*:*:*:jenkins:*:*

part: a version: * update: *

Vendor	Jenkins (`d708d718-2e77-5ca3-ae9c-38ee4d256744`)
Product	Kubernetes (`6eab7f91-fe48-5416-a9cf-c3f17ab8e7da`)
Edition	*
Language	*
Software edition	*
Target software	jenkins
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-30513`	vulnerable	2026-06-08 06:04:39.690306	Details available Jenkins Kubernetes Plugin 3909.v1f2c633e8590 and earlier does not properly mask (i.e., replace with asterisks) credentials in the build log when push mode for durable task logging is enabled. Published: 2023-04-12T17:05:05.743Z Updated: 2025-02-07T19:24:28.934Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-3075 http://www.openwall.com/lists/oss-security/2023/04/13/3	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-21661`	vulnerable	2026-06-08 05:29:13.097488	Details available Jenkins Kubernetes CLI Plugin 1.10.0 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins. Published: 2021-06-10T14:25:19.000Z Updated: 2024-08-03T18:23:27.518Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2021-06-10/#SECURITY-2370 http://www.openwall.com/lists/oss-security/2021/06/10/14	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-2309`	vulnerable	2026-06-08 05:24:59.257894	Details available A missing/An incorrect permission check in Jenkins Kubernetes Plugin 1.27.3 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins. Published: 2020-11-04T14:35:40.000Z Updated: 2024-08-04T07:09:53.325Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2020-11-04/#SECURITY-2103	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-2308`	vulnerable	2026-06-08 05:24:59.257582	Details available A missing permission check in Jenkins Kubernetes Plugin 1.27.3 and earlier allows attackers with Overall/Read permission to list global pod template names. Published: 2020-11-04T14:35:40.000Z Updated: 2024-08-04T07:09:54.588Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2020-11-04/#SECURITY-2102	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-2307`	vulnerable	2026-06-08 05:24:59.257071	Details available Jenkins Kubernetes Plugin 1.27.3 and earlier allows low-privilege users to access possibly sensitive Jenkins controller environment variables. Published: 2020-11-04T14:35:40.000Z Updated: 2024-08-04T07:09:53.317Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2020-11-04/#SECURITY-1646	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-1999040`	vulnerable	2026-06-08 05:11:15.139711	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-1000187`	vulnerable	2026-06-08 05:10:25.615383	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.