Jenkins Weibo Plugin 1.0.1 and earlier stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.
- - - -- -
- Use the slider to filter out lower relevance scores and the button to collapse or expand all the commits. -
- -Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Solr.This issue affects Apache Solr: from 6.0.0 through 8.11.2, from 9.0.0 before 9.4.1. - -Solr Streaming Expressions allows users to extract data from other Solr Clouds, using a "zkHost" parameter. -When original SolrCloud is setup to use ZooKeeper credentials and ACLs, they will be sent to whatever "zkHost" the user provides. -An attacker could setup a server to mock ZooKeeper, that accepts ZooKeeper requests with credentials and ACLs and extracts the sensitive information, -then send a streaming expression using the mock server's address in "zkHost". -Streaming Expressions are exposed via the "/streaming" handler, with "read" permissions. - -Users are recommended to upgrade to version 8.11.3 or 9.4.1, which fix the issue. -From these versions on, only zkHost values that have the same server address (regardless of chroot), will use the given ZooKeeper credentials and ACLs when connecting. - -
- - --
- -
A missing permission check in an HTTP endpoint in Jenkins docker-build-step Plugin 2.11 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified TCP or Unix socket URL, and to reconfigure the plugin using the provided connection test parameters, affecting future build step executions.
- - --
- -
- Use the slider to filter out lower relevance scores and the button to collapse or expand all the commits. -
- -Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an '@' character followed by a file path in an argument with the file's contents, allowing unauthenticated attackers to read arbitrary files on the Jenkins controller file system.
- - --
- -
- Use the slider to filter out lower relevance scores and the button to collapse or expand all the commits. -
- -Mattermost versions 9.5.x <= 9.5.7 and 9.10.x <= 9.10.0 fail to time limit and size limit the CA path file in the ElasticSearch configuration which allows a System Role with access to the Elasticsearch system console to add any file as a CA path field, such as /dev/zero and, after testing the connection, cause the application to crash.
- - --
- -
- Use the slider to filter out lower relevance scores and the button to collapse or expand all the commits. -
- -CKAN is an open-source data management system for powering data hubs and data portals. If there were connection issues with the Solr server, the internal Solr URL (potentially including credentials) could be leaked to package_search calls as part of the returned error message. This has been patched in CKAN 2.10.5 and 2.11.0.
- - --
- -