Approved changes feed: RSS · Atom

cpe:2.3:a:jenkins:inedo_proget:*:*:*:*:*:jenkins:*:*

part: a version: * update: *

VendorJenkins (d708d718-2e77-5ca3-ae9c-38ee4d256744)
ProductInedo Proget (dd70d357-2392-560a-bf3b-66eb8e44c0a7)
Edition*
Language*
Software edition*
Target softwarejenkins
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-10412 vulnerable 2026-06-08 05:12:23.288954 Details available
Jenkins Inedo ProGet Plugin 1.2 and earlier transmitted configured credentials in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure.
Published: 2019-09-25T15:05:33.000Z
Updated: 2024-08-04T22:24:17.505Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1999034 vulnerable 2026-06-08 05:11:15.130623 Details available
A man in the middle vulnerability exists in Jenkins Inedo ProGet Plugin 0.8 and earlier in ProGetApi.java, ProGetConfig.java, ProGetConfiguration.java that allows attackers to impersonate any service that Jenkins connects to.
Published: 2018-08-01T13:00:00.000Z
Updated: 2024-09-16T22:31:06.196Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.