← Back

Tracetronic Ecu Test

tracetronic_ecu-test

Vendor: Jenkins • 3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-21612
1Jenkins
1Tracetronic Ecu Test
Nov 21, 2024
Jan 13, 2021
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
Jenkins TraceTronic ECU-TEST Plugin 2.23.1 and earlier stores credentials unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller fil...Show more
Jenkins TraceTronic ECU-TEST Plugin 2.23.1 and earlier stores credentials unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system.Show less
CVE-2018-1999026
1Jenkins
1Tracetronic Ecu Test
Nov 21, 2024
Aug 1, 2018
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
A server-side request forgery vulnerability exists in Jenkins TraceTronic ECU-TEST Plugin 2.3 and earlier in ATXPublisher.java that allows attackers to have Jenkins send HTTP requests to an attacker-specified host.
CVE-2018-1999025
1Jenkins
1Tracetronic Ecu Test
Nov 21, 2024
Aug 1, 2018
N/A· v4
7.4 HIGH· v3
5.8 MEDIUM· v2
A man in the middle vulnerability exists in Jenkins TraceTronic ECU-TEST Plugin 2.3 and earlier in ATXPublisher.java, ATXValidator.java that allows attackers to impersonate any service that Jenkins connects to.