Veille CVE

Recherche « Jenkins Project Jenkins Parameterized Remote Trigger Plugin »

2 CVE

Critique 0 Élevée 0 Moyenne 2 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Jenkins Project Jenkins Parameterized Remote Trigger Plugin » ✕
  1. CVE-2026-84676 4.3 Moyenne

    Jenkins Project Jenkins Parameterized Remote Trigger Plugin

    Jenkins Parameterized Remote Trigger Plugin 3.2.2 and earlier stores tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.

  2. CVE-2026-70438 4.3 Moyenne

    Jenkins Project Jenkins Parameterized Remote Trigger Plugin

    A missing permission check in Jenkins Parameterized Remote Trigger Plugin 3.2.2 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.