Описание
A potential vulnerability has been identified in the Micro Focus Dimensions CM Plugin for Jenkins. The vulnerability could be exploited to retrieve a login certificate if an authenticated user is duped into using an attacker-controlled Dimensions CM server. This vulnerability only applies when the Jenkins plugin is configured to use login certificate credentials.
Ссылки
- Product
- Vendor Advisory
- Product
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 0.8.17 (включая) до 0.9.3 (включая)
cpe:2.3:a:microfocus:dimensions_cm:*:*:*:*:*:jenkins:*:*
EPSS
Процентиль: 46%
0.00237
Низкий
2.6 Low
CVSS3
5.7 Medium
CVSS3
Дефекты
NVD-CWE-noinfo
Связанные уязвимости
CVSS3: 2.6
github
больше 2 лет назад
Potential leak of credentials in Micro Focus Dimensions CM Jenkins Plugin
EPSS
Процентиль: 46%
0.00237
Низкий
2.6 Low
CVSS3
5.7 Medium
CVSS3
Дефекты
NVD-CWE-noinfo