Container Scanning Connector Jenkins Plugin
Approved changes feed: RSS · Atom
cpe:2.3:a:qualys,inc.:container_scanning_connector_jenkins_plugin:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Qualys,Inc. (c9f7c9f3-4eaa-58a8-9031-8cfa53c4240f) |
|---|---|
| Product | Container Scanning Connector Jenkins Plugin (1c103bdc-48a7-5f8e-a2ca-a3ee93b11c16) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-4777 |
vulnerable | 2026-06-08 06:16:14.546691 |
Incorrect Permission Assignment on Qualys Container Scanning Connector Plugin 1.6.2.6 and earlier
LOW (3.1)
An incorrect permission check in Qualys Container Scanning Connector Plugin 1.6.2.6 and earlier allows attackers with global Item/Configure permission (while lacking Item/Configure permission on any particular job) to enumerate credentials IDs of credentials stored in Jenkins and to connect to an attacker-specified URL using attacker-specified credentials IDs, capturing credentials stored in Jenkins.
Published: 2023-09-08T08:42:35.645Z
Updated: 2024-09-25T20:07:05.784Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.