Filtered by vendor Jenkins Subscriptions
Filtered by product Koji Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2019-10314 1 Jenkins 1 Koji 2023-10-25 N/A
Jenkins Koji Plugin disables SSL/TLS and hostname verification globally for the Jenkins master JVM.
CVE-2019-10298 1 Jenkins 1 Koji 2023-10-25 8.8 High
Jenkins Koji Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.