Synopsys Jenkins Coverity Plugin vulnerabilities

3 vulnerabilities

Known vulnerabilities in Synopsys Jenkins Coverity Plugin, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.3MediumCVE-2023-23850jenkins · synopsys_coverity +2 morejenkins synopsys_coverityA missing permission check in Synopsys Jenkins Coverity Plugin 3.0.2 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.EPSS0.51%3.5LowCVE-2023-23847jenkins · synopsys_coverity +2 morejenkins synopsys_coverityA cross-site request forgery (CSRF) vulnerability in Synopsys Jenkins Coverity Plugin 3.0.2 and earlier allows attackers to connect to an attacker-specified HTTP server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.EPSS0.36%4.3MediumCVE-2023-23848jenkins · synopsys_coverity +2 morejenkins synopsys_coverityMissing permission checks in Synopsys Jenkins Coverity Plugin 3.0.2 and earlier allow attackers with Overall/Read permission to connect to an attacker-specified HTTP server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.EPSS0.52%