Known Vulnerabilities for Elastest by Jenkins
Listed below are 3 of the newest known vulnerabilities associated with "Elastest" by "Jenkins".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2020-2274 json | Jenkins ElasTest Plugin 1.2.1 and earlier stores its server password unencrypted in its global configuration file on the Jenk... | 5.5 - MEDIUM | 2020-09-16 | 2023-10-25 |
| CVE-2020-2273 json | A cross-site request forgery (CSRF) vulnerability in Jenkins ElasTest Plugin 1.2.1 and earlier allows attackers to connect to... | 4.3 - MEDIUM | 2020-09-16 | 2023-11-03 |
| CVE-2020-2272 json | A missing permission check in Jenkins ElasTest Plugin 1.2.1 and earlier allows attackers with Overall/Read permission to conn... | 4.3 - MEDIUM | 2020-09-16 | 2023-10-25 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Jenkins | Elastest | 1.2.1 |