Jenkins Delphix Plugin
Approved changes feed: RSS · Atom
cpe:2.3:a:jenkins_project:jenkins_delphix_plugin:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Jenkins Project (860cd631-1316-551d-89a3-5aa9a0d4f462) |
|---|---|
| Product | Jenkins Delphix Plugin (081e93ce-28c2-55a9-9b42-ceb76c37e711) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-28162 |
vulnerable | 2026-06-08 06:33:26.609099 |
Details available
In Jenkins Delphix Plugin 3.0.1 through 3.1.0 (both inclusive) a global option for administrators to enable or disable SSL/TLS certificate validation for Data Control Tower (DCT) connections fails to take effect until Jenkins is restarted when switching from disabled validation to enabled validation.
Published: 2024-03-06T17:02:02.667Z
Updated: 2025-02-13T17:47:25.492Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28161 |
vulnerable | 2026-06-08 06:33:26.607301 |
Details available
In Jenkins Delphix Plugin 3.0.1, a global option for administrators to enable or disable SSL/TLS certificate validation for Data Control Tower (DCT) connections is disabled by default.
Published: 2024-03-06T17:02:02.033Z
Updated: 2025-02-13T17:47:24.992Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-40345 |
vulnerable | 2026-06-08 06:09:42.108010 |
Details available
Jenkins Delphix Plugin 3.0.2 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Overall/Read permission to access and capture credentials they are not entitled to.
Published: 2023-08-16T14:32:55.174Z
Updated: 2024-10-08T18:28:25.965Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-40344 |
vulnerable | 2026-06-08 06:09:42.106293 |
Details available
A missing permission check in Jenkins Delphix Plugin 3.0.2 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.
Published: 2023-08-16T14:32:54.541Z
Updated: 2024-10-08T18:29:42.817Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10453 |
vulnerable | 2026-06-08 05:12:23.349532 |
Details available
Jenkins Delphix Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.
Published: 2019-10-16T13:00:52.000Z
Updated: 2024-08-04T22:24:17.977Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.