Approved changes feed: RSS · Atom

cpe:2.3:a:jenkins_project:jenkins_soasta_cloudtest_plugin:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorJenkins Project (860cd631-1316-551d-89a3-5aa9a0d4f462)
ProductJenkins Soasta Cloudtest Plugin (4e6e2560-839e-5082-8e79-7af043a3b0ca)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-10451 vulnerable 2026-06-08 05:12:23.346822 Details available
Jenkins SOASTA CloudTest Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.
Published: 2019-10-16T13:00:51.000Z
Updated: 2024-08-04T22:24:18.441Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-1003091 vulnerable 2026-06-08 05:12:21.527125 Details available
A missing permission check in Jenkins SOASTA CloudTest Plugin in the CloudTestServer.DescriptorImpl#doValidate form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server.
Published: 2019-04-04T15:38:49.000Z
Updated: 2024-08-05T03:07:18.227Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-1003090 vulnerable 2026-06-08 05:12:21.526084 Details available
A cross-site request forgery vulnerability in Jenkins SOASTA CloudTest Plugin in the CloudTestServer.DescriptorImpl#doValidate form validation method allows attackers to initiate a connection to an attacker-specified server.
Published: 2019-04-04T15:38:49.000Z
Updated: 2024-08-05T03:07:17.956Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.