Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 01:20:35 +0000 cnvd-2018-07750 https://cve.radiocsirt.org/vuln/cnvd-2018-07750 cnvd-2018-07750 https://cve.radiocsirt.org/vuln/cnvd-2018-07750 EUVD-2026-183220 https://cve.radiocsirt.org/vuln/euvd-2026-183220 EUVD-2026-183220 https://cve.radiocsirt.org/vuln/euvd-2026-183220 fkie_cve-2018-1000109 https://cve.radiocsirt.org/vuln/fkie_cve-2018-1000109 <p>An improper authorization vulnerability exists in Jenkins Google Play Android Publisher Plugin version 1.6 and earlier in GooglePlayBuildStepDescriptor.java that allow an attacker to obtain credential IDs.</p> <p>An improper authorization vulnerability exists in Jenkins Google Play Android Publisher Plugin version 1.6 and earlier in GooglePlayBuildStepDescriptor.java that allow an attacker to obtain credential IDs.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-1000109 GHSA-rvx4-gg8w-qw24 — Jenkins Google Play Android Publisher Plugin allows attacker to obtain credential IDs https://cve.radiocsirt.org/vuln/ghsa-rvx4-gg8w-qw24 <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:google-play-android-publisher</p> <p>An improper authorization vulnerability exists in Jenkins Google Play Android Publisher Plugin version 1.6 and earlier in `GooglePlayBuildStepDescriptor.java` that allow an attacker to obtain credential IDs. As of version 1.7, enumeration of credentials IDs and validation of specified credentials in this plugin requires the permissions to have the ExtendedRead permission (when that permission is enabled; otherwise Configure permission) to the job in whose context credentials are being accessed.</p> <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:google-play-android-publisher</p> <p>An improper authorization vulnerability exists in Jenkins Google Play Android Publisher Plugin version 1.6 and earlier in `GooglePlayBuildStepDescriptor.java` that allow an attacker to obtain credential IDs. As of version 1.7, enumeration of credentials IDs and validation of specified credentials in this plugin requires the permissions to have the ExtendedRead permission (when that permission is enabled; otherwise Configure permission) to the job in whose context credentials are being accessed.</p> https://cve.radiocsirt.org/vuln/ghsa-rvx4-gg8w-qw24 gsd-2018-1000109 https://cve.radiocsirt.org/vuln/gsd-2018-1000109 gsd-2018-1000109 https://cve.radiocsirt.org/vuln/gsd-2018-1000109