Jenkins Coverity Plugin vulnerabilities

2 known vulnerabilities in Jenkins Coverity Plugin from Jenkins. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  Jenkins Coverity Plugin: Missing Authorization

  CVE-2022-36921Jul 27, 2022Jenkins

  A missing permission check in Jenkins Coverity Plugin 1.11.4 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials store

• 8.8 High severity

  Jenkins Coverity Plugin: Cross-Site Request Forgery

  CVE-2022-36920Jul 27, 2022Jenkins

  A cross-site request forgery (CSRF) vulnerability in Jenkins Coverity Plugin 1.11.4 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in J