Approved changes feed: RSS · Atom

cpe:2.3:a:jenkins_project:jenkins_qualys_web_app_scanning_connector_plugin:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorJenkins Project (860cd631-1316-551d-89a3-5aa9a0d4f462)
ProductJenkins Qualys Web App Scanning Connector Plugin (a567b59d-644f-588b-a0d1-07bfbd86d6bc)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-39154 vulnerable 2026-06-08 06:09:35.824218 Details available
Incorrect permission checks in Jenkins Qualys Web App Scanning Connector Plugin 2.0.10 and earlier allow attackers with global Item/Configure permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
Published: 2023-07-26T13:54:54.206Z
Updated: 2024-10-23T14:46:37.651Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.