jenkins_websphere_deployer

unspecified

OTHER 4 CVEs

1.6.1

SEMANTIC 4 CVEs

next of 1.6.1

OTHER 4 CVEs

all versions as of 2019-04-03

DATE_BASED 1 CVE

CVE-2020-2108

Jenkins WebSphere Deployer Plugin 1.6.1 and earlier does not configure the XML parser to prevent XXE attacks which can be exploited by a user with Job/Configure permissions.

UNKNOWN Jan 29, 2020

CVE-2019-16561

Jenkins WebSphere Deployer Plugin 1.6.1 and earlier allows users with Overall/Read access to disable SSL/TLS certificate and hostname validation for the entire Jenkins master JVM.

UNKNOWN Dec 17, 2019

CVE-2019-16560

A cross-site request forgery vulnerability in Jenkins WebSphere Deployer Plugin 1.6.1 and earlier allows attackers to perform connection tests and determine whether files with an attacker-specified path exist on the Jenkins master file system.

UNKNOWN Dec 17, 2019

CVE-2019-16559

A missing permission check in Jenkins WebSphere Deployer Plugin 1.6.1 and earlier allows attackers with Overall/Read permission to perform connection tests and determine whether files with an attacker-specified path exist on the Jenkins master file system.

UNKNOWN Dec 17, 2019