CVE Intelligence

Vulnerabilidades do Jenkins Project Jenkins SCM-Manager Plugin

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Jenkins Project Jenkins SCM-Manager Plugin: 2 registro(s), com versões afetadas e correções.

CVE-2026-70435 Média · 4.2 CWE-862 05/08/2026
Missing Authorization em Jenkins Project Jenkins SCM-Manager Plugin
A missing permission check in Jenkins SCM-Manager Plugin 1.11.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
CVE-2026-70434 Média · 4.2 CWE-352 05/08/2026
Cross-Site Request Forgery (CSRF) em Jenkins Project Jenkins SCM-Manager Plugin
A cross-site request forgery (CSRF) vulnerability in Jenkins SCM-Manager Plugin 1.11.1 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.