GCVE - cpe:2.3:a:jenkins:synopsys_coverity:*:*:*:*:*:jenkins:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:jenkins:synopsys_coverity:*:*:*:*:*:jenkins:*:*

part: a version: * update: *

Vendor	Jenkins (`d708d718-2e77-5ca3-ae9c-38ee4d256744`)
Product	Synopsys Coverity (`76c902df-96e6-5510-a9c4-8597c157e9a3`)
Edition	*
Language	*
Software edition	*
Target software	jenkins
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-23850`	vulnerable	2026-06-08 05:56:04.540567	Details available A missing permission check in Synopsys Jenkins Coverity Plugin 3.0.2 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins. Published: 2023-02-15T00:00:00.000Z Updated: 2025-03-18T19:28:15.384Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2023-02-15/#SECURITY-2793%20%281%29 https://community.synopsys.com/s/article/SIG-Product-Security-Advisory-Multiple-CVEs-affecting-Coverity-Jenkins-Plugin	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-23848`	vulnerable	2026-06-08 05:56:04.538382	Details available Missing permission checks in Synopsys Jenkins Coverity Plugin 3.0.2 and earlier allow attackers with Overall/Read permission to connect to an attacker-specified HTTP server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins. Published: 2023-02-15T00:00:00.000Z Updated: 2025-03-18T19:33:50.288Z Open on db.gcve.eu Reference links https://community.synopsys.com/s/article/SIG-Product-Security-Advisory-Multiple-CVEs-affecting-Coverity-Jenkins-Plugin https://www.jenkins.io/security/advisory/2023-02-15/#SECURITY-2793%20%282%29	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-23847`	vulnerable	2026-06-08 05:56:04.537762	Details available A cross-site request forgery (CSRF) vulnerability in Synopsys Jenkins Coverity Plugin 3.0.2 and earlier allows attackers to connect to an attacker-specified HTTP server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins. Published: 2023-02-15T00:00:00.000Z Updated: 2025-03-19T15:59:24.338Z Open on db.gcve.eu Reference links https://community.synopsys.com/s/article/SIG-Product-Security-Advisory-Multiple-CVEs-affecting-Coverity-Jenkins-Plugin https://www.jenkins.io/security/advisory/2023-02-15/#SECURITY-2793%20%282%29	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.