FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2024-12-19 12:13:07 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML ID	Description
e387834a-17ef-11e6-9947-7054d2909b71	jenkins -- multiple vulnerabilities Jenkins Security Advisory: Description SECURITY-170 / CVE-2016-3721 Arbitrary build parameters are passed to build scripts as environment variables SECURITY-243 / CVE-2016-3722 Malicious users with multiple user accounts can prevent other users from logging in SECURITY-250 / CVE-2016-3723 Information on installed plugins exposed via API SECURITY-266 / CVE-2016-3724 Encrypted secrets (e.g. passwords) were leaked to users with permission to read configuration SECURITY-273 / CVE-2016-3725 Regular users can trigger download of update site metadata SECURITY-276 / CVE-2016-3726 Open redirect to scheme-relative URLs SECURITY-281 / CVE-2016-3727 Granting the permission to read node configurations allows access to overall system configuration Discovery 2016-05-11 Entry 2016-05-12 jenkins <= 2.2 jenkins2 <= 2.2 jenkins-lts <= 1.651.1 CVE-2016-3721 CVE-2016-3722 CVE-2016-3723 CVE-2016-3724 CVE-2016-3725 CVE-2016-3726 CVE-2016-3727 https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-05-11

VuXML ID

Description

e387834a-17ef-11e6-9947-7054d2909b71

jenkins -- multiple vulnerabilities

Jenkins Security Advisory:

Description

SECURITY-170 / CVE-2016-3721

Arbitrary build parameters are passed to build scripts as environment variables

SECURITY-243 / CVE-2016-3722

Malicious users with multiple user accounts can prevent other users from logging in

SECURITY-250 / CVE-2016-3723

Information on installed plugins exposed via API

SECURITY-266 / CVE-2016-3724

Encrypted secrets (e.g. passwords) were leaked to users with permission to read configuration

SECURITY-273 / CVE-2016-3725

Regular users can trigger download of update site metadata

SECURITY-276 / CVE-2016-3726

Open redirect to scheme-relative URLs

SECURITY-281 / CVE-2016-3727

Granting the permission to read node configurations allows access to overall system configuration

Discovery 2016-05-11
Entry 2016-05-12
jenkins

<= 2.2

jenkins2

<= 2.2

jenkins-lts

<= 1.651.1

CVE-2016-3721
CVE-2016-3722
CVE-2016-3723
CVE-2016-3724
CVE-2016-3725
CVE-2016-3726
CVE-2016-3727
https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-05-11