Total
2 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2022-34809 | 1 Jenkins | 1 Rqm | 2024-02-04 | 4.0 MEDIUM | 6.5 MEDIUM |
Jenkins RQM Plugin 2.8 and earlier stores a password unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system. | |||||
CVE-2022-34810 | 1 Jenkins | 1 Rqm | 2024-02-04 | 4.0 MEDIUM | 6.5 MEDIUM |
A missing check in Jenkins RQM Plugin 2.8 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins. |