Jenkins NS-ND Integration Performance Publisher Plugin vulnerabilities
5 known vulnerabilities in Jenkins NS-ND Integration Performance Publisher Plugin from Jenkins. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
Jenkins NS-ND Integration Performance…: Insufficiently Protected Credentials
Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.149 and earlier does not mask credentials displayed on the configuration form, increasing the potential for attackers to observe and capture them.
- 7.5 High severity
Jenkins NS-ND Integration Performance…: Improper Certificate Validation
Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.143 and earlier globally and unconditionally disables SSL/TLS certificate and hostname validation for the entire Jenkins controller JVM.
- 7.5 High severity
Jenkins NS-ND Integration Performance…: Improper Certificate Validation
Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.146 and earlier unconditionally disables SSL/TLS certificate and hostname validation for several features.
- 8.8 High severity
Jenkins NS-ND Integration Performance…: Missing Authorization
A missing permission check in Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.129 and earlier allows attackers with Overall/Read permissions to connect to an attacker-specified webserver using attacker-specified credentials.
- 8.8 High severity
Jenkins NS-ND Integration Performance…: Cross-Site Request Forgery
A cross-site request forgery (CSRF) vulnerability in Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.129 and earlier allows attackers to connect to an attacker-specified webserver using attacker-specified credentials.