Sep 25, 2018 · This allows attacker to send crafted requests to a web application for extraction of secrets ... Monitoring plugin 1.74 updates its JavaMelody ...
Mar 15, 2022 · This results in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure or Item/Create permissions.
Missing: web | Show results with:web
Jul 12, 2023 · XXE vulnerability in External Monitor Job Type Plugin This allows attackers with Item/Build permission to have Jenkins parse a crafted HTTP ...
Missing: web | Show results with:web
Apr 26, 2017 · An unauthenticated remote code execution vulnerability allowed attackers to transfer a serialized Java SignedObject object to the remoting-based ...
Dec 15, 2021 · Hi All, I have a Jenkins V2.323 controller running on Windows Server 2012 and a Node (agent) running Windows 10. Both computer are running ...
A Security Realm which informs the Jenkins environment how and where to pull user (or identity) information from. Also commonly known as "authentication.".
Missing: java monitoring secrets
Apr 10, 2017 · This advisory announces vulnerabilities or security-related fixes in these Jenkins plugins: Adaptive DSL · Application Detector.
Description: true to disable the monitor that recommends newer Java versions. jenkins.security.ApiTokenProperty.adminCanGenerateNewTokens. escape ...
Dynatrace Application Monitoring2.1.5. dynatrace-dashboard. Javadoc ... Java JSON Web Token (JJWT)0.11.5-112 ... Web Security Application Project (WSAP)1.0. wsap.
Assigns the password for user $USER. If Jenkins security is enabled, you must log in as a user who has an admin role to configure Jenkins. --argumentsRealm.