GCVE - cpe:2.3:a:jenkins:configuration_as

Approved changes feed: RSS · Atom

cpe:2.3:a:jenkins:configuration_as_code:*:*:*:*:*:jenkins:*:*

part: a version: * update: *

Vendor	Jenkins (`d708d718-2e77-5ca3-ae9c-38ee4d256744`)
Product	Configuration As Code (`f9789db4-484e-530b-a9cb-c2a43d9914ad`)
Edition	*
Language	*
Software edition	*
Target software	jenkins
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-23106`	vulnerable	2026-06-08 05:40:56.325920	Details available Jenkins Configuration as Code Plugin 1.55 and earlier used a non-constant time comparison function when validating an authentication token allowing attackers to use statistical methods to obtain a valid authentication token. Published: 2022-01-12T00:00:00.000Z Updated: 2024-08-03T03:36:19.211Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-2141 http://www.openwall.com/lists/oss-security/2022/01/12/6	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-10367`	vulnerable	2026-06-08 05:12:23.222853	Details available Due to an incomplete fix of CVE-2019-10343, Jenkins Configuration as Code Plugin 1.26 and earlier did not properly apply masking to some values expected to be hidden when logging the configuration being applied. Published: 2019-08-07T14:20:23.000Z Updated: 2024-08-04T22:17:20.402Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2019/08/07/1 https://jenkins.io/security/advisory/2019-08-07/#SECURITY-1497	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-10363`	vulnerable	2026-06-08 05:12:23.216511	Details available Jenkins Configuration as Code Plugin 1.24 and earlier did not reliably identify sensitive values expected to be exported in their encrypted form. Published: 2019-07-31T12:45:21.000Z Updated: 2024-08-04T22:17:20.370Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2019/07/31/1 https://jenkins.io/security/advisory/2019-07-31/#SECURITY-1458	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-10362`	vulnerable	2026-06-08 05:12:23.216190	Details available Jenkins Configuration as Code Plugin 1.24 and earlier did not escape values resulting in variable interpolation during configuration import when exporting, allowing attackers with permission to change Jenkins system configuration to obtain the values of environment variables. Published: 2019-07-31T12:45:21.000Z Updated: 2024-08-04T22:17:20.521Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2019/07/31/1 https://jenkins.io/security/advisory/2019-07-31/#SECURITY-1446	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-10345`	vulnerable	2026-06-08 05:12:23.187520	Details available Jenkins Configuration as Code Plugin 1.20 and earlier did not treat the proxy password as a secret to be masked when logging or encrypted for export. Published: 2019-07-31T12:45:21.000Z Updated: 2024-08-04T22:17:20.474Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2019/07/31/1 https://jenkins.io/security/advisory/2019-07-31/#SECURITY-1303	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-10344`	vulnerable	2026-06-08 05:12:23.187057	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-10343`	vulnerable	2026-06-08 05:12:23.186622	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Configuration As Code

PURL mappings

Vulnerability references

Contribute