https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 14:57:22 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-197070 EUVD-2026-197070 https://cve.radiocsirt.org/vuln/euvd-2026-197070 https://cve.radiocsirt.org/vuln/fkie_cve-2023-39155 <p>Jenkins Chef Identity Plugin 2.0.3 and earlier does not mask the user.pem key form field, increasing the potential for attackers to observe and capture it.</p> <p>Jenkins Chef Identity Plugin 2.0.3 and earlier does not mask the user.pem key form field, increasing the potential for attackers to observe and capture it.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-39155 https://cve.radiocsirt.org/vuln/ghsa-5jc5-m87x-88fj <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:chef-identity</p> <p>Chef Identity Plugin stores the user.pem key in its global configuration file `io.chef.jenkins.ChefIdentityBuildWrapper.xml` on the Jenkins controller as part of its configuration.</p> <p>While this key is stored encrypted on disk, in Chef Identity Plugin 2.0.3 and earlier the global configuration form does not mask the user.pem key form field, increasing the potential for attackers to observe and capture it.</p> <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:chef-identity</p> <p>Chef Identity Plugin stores the user.pem key in its global configuration file `io.chef.jenkins.ChefIdentityBuildWrapper.xml` on the Jenkins controller as part of its configuration.</p> <p>While this key is stored encrypted on disk, in Chef Identity Plugin 2.0.3 and earlier the global configuration form does not mask the user.pem key form field, increasing the potential for attackers to observe and capture it.</p> https://cve.radiocsirt.org/vuln/ghsa-5jc5-m87x-88fj https://cve.radiocsirt.org/vuln/gsd-2023-39155 gsd-2023-39155 https://cve.radiocsirt.org/vuln/gsd-2023-39155 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1902 <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um Sicherheitsvorkehrungen zu umgehen, vertrauliche Informationen offenzulegen und einen Cross-Site-Scripting-Angriff durchzuführen.</p> <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um Sicherheitsvorkehrungen zu umgehen, vertrauliche Informationen offenzulegen und einen Cross-Site-Scripting-Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1902