Jenkins Conjur Secrets Plugin

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:jenkins_project:jenkins_conjur_secrets_plugin:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorJenkins Project (860cd631-1316-551d-89a3-5aa9a0d4f462)
ProductJenkins Conjur Secrets Plugin (b4c5c8cd-6c5c-5e5b-89db-a99374f17c1a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-25190 vulnerable 2026-06-08 05:41:45.512342 Details available
A missing permission check in Jenkins Conjur Secrets Plugin 1.0.11 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.
Published: 2022-02-15T16:11:17.000Z
Updated: 2024-10-15T17:13:57.861Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-23117 vulnerable 2026-06-08 05:40:56.345893 Details available
Jenkins Conjur Secrets Plugin 1.0.9 and earlier implements functionality that allows attackers able to control agent processes to retrieve all username/password credentials stored on the Jenkins controller.
Published: 2022-01-12T19:06:25.000Z
Updated: 2024-08-03T03:36:20.033Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-23116 vulnerable 2026-06-08 05:40:56.344738 Details available
Jenkins Conjur Secrets Plugin 1.0.9 and earlier implements functionality that allows attackers able to control agent processes to decrypt secrets stored in Jenkins obtained through another method.
Published: 2022-01-12T19:06:23.000Z
Updated: 2024-08-03T03:36:19.213Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.