GCVE - cpe:2.3:a:jenkins:fortify_on_demand:*:*:*:*:*:jenkins:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:jenkins:fortify_on_demand:*:*:*:*:*:jenkins:*:*

part: a version: * update: *

Vendor	Jenkins (`d708d718-2e77-5ca3-ae9c-38ee4d256744`)
Product	Fortify On Demand (`8b86b4b4-252d-5e06-88ab-080862eae546`)
Edition	*
Language	*
Software edition	*
Target software	jenkins
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2020-2204`	vulnerable	2026-06-08 05:24:59.082534	Details available A missing permission check in Jenkins Fortify on Demand Plugin 5.0.1 and earlier allows attackers with Overall/Read permission to connect to the globally configured Fortify on Demand endpoint using attacker-specified credentials IDs. Published: 2020-07-02T14:55:34.000Z Updated: 2024-08-04T07:01:41.183Z Open on db.gcve.eu Reference links https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1691 http://www.openwall.com/lists/oss-security/2020/07/02/7	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-2203`	vulnerable	2026-06-08 05:24:59.081992	Details available A cross-site request forgery vulnerability in Jenkins Fortify on Demand Plugin 5.0.1 and earlier allows attackers to connect to the globally configured Fortify on Demand endpoint using attacker-specified credentials IDs. Published: 2020-07-02T14:55:33.000Z Updated: 2024-08-04T07:01:41.158Z Open on db.gcve.eu Reference links https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1691 http://www.openwall.com/lists/oss-security/2020/07/02/7	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-2202`	vulnerable	2026-06-08 05:24:59.081498	Details available A missing permission check in Jenkins Fortify on Demand Plugin 6.0.0 and earlier in form-related methods allowed users with Overall/Read access to enumerate credentials ID of credentials stored in Jenkins. Published: 2020-07-02T14:55:33.000Z Updated: 2024-08-04T07:01:41.113Z Open on db.gcve.eu Reference links https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1690 http://www.openwall.com/lists/oss-security/2020/07/02/7	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-10449`	vulnerable	2026-06-08 05:12:23.344909	Details available Jenkins Fortify on Demand Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system. Published: 2019-10-16T13:00:50.000Z Updated: 2024-08-04T22:24:17.953Z Open on db.gcve.eu Reference links https://jenkins.io/security/advisory/2019-10-16/#SECURITY-1433	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.