Vulnerabilidades do Jenkins Zowe Zdevops
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Jenkins Zowe Zdevops: 2 registro(s), com versões afetadas e correções.cpe:2.3:a:jenkins:zowe_zdevops
CVE-2026-57307
Média · 4.2
CWE-862 24/06/2026
Missing Authorization em Jenkins Zowe Zdevops
A missing permission check in Jenkins Zowe zDevOps Plugin 1.1.3.50.ve350c9b_450b_1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
CVE-2026-57306
Média · 4.2
CWE-352 24/06/2026
Cross-Site Request Forgery (CSRF) em Jenkins Zowe Zdevops
A cross-site request forgery (CSRF) vulnerability in Jenkins Zowe zDevOps Plugin 1.1.3.50.ve350c9b_450b_1 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.