Jenkins Kubernetes vulnerabilities
7 vulnerabilities
Known vulnerabilities in Jenkins Kubernetes, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2018-1999040jenkinskubernetes+1
EPSS score1.40%
An exposure of sensitive information vulnerability exists in Jenkins Kubernetes Plugin 1.10.1 and earlier in KubernetesCloud.java that allows attackers to capture credentials with a known credentials ID stored in Jenkins.CVE-2018-1000187jenkinskubernetes+1EPSS score1.27%
A exposure of sensitive information vulnerability exists in Jenkins Kubernetes Plugin 1.7.0 and older in ContainerExecDecorator.java that results in sensitive variables such as passwords being written to logs.CVE-2021-21661jenkins projectjenkins kubernetes cli plugin+2EPSS score1.64%
Jenkins Kubernetes CLI Plugin 1.10.0 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.CVE-2020-2308jenkins projectjenkins kubernetes plugin+2EPSS score1.18%
A missing permission check in Jenkins Kubernetes Plugin 1.27.3 and earlier allows attackers with Overall/Read permission to list global pod template names.CVE-2020-2307jenkins projectjenkins kubernetes plugin+2EPSS score1.25%
Jenkins Kubernetes Plugin 1.27.3 and earlier allows low-privilege users to access possibly sensitive Jenkins controller environment variables.CVE-2020-2309jenkins projectjenkins kubernetes plugin+2EPSS score1.15%
A missing/An incorrect permission check in Jenkins Kubernetes Plugin 1.27.3 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.CVE-2023-30513jenkinskubernetes+1EPSS score0.49%
Jenkins Kubernetes Plugin 3909.v1f2c633e8590 and earlier does not properly mask (i.e., replace with asterisks) credentials in the build log when push mode for durable task logging is enabled.