Team IT Security (TSEC) Nachrichtenportal Logo


🕵️ CVE-2022-34211 | Jenkins vRealize Orchestrator Plugin up to 3.0 HTTP POST Request cross-site request forgery


Nachrichtenbereich: 🕵️ Sicherheitslücken
🔗 Quelle: vuldb.com

A vulnerability, which was classified as problematic, was found in Jenkins vRealize Orchestrator Plugin up to 3.0. Affected is an unknown function of the component HTTP POST Request Handler. The manipulation leads to cross-site request forgery. This vulnerability is traded as CVE-2022-34211. It is possible to launch the attack remotely. There is no exploit available. ...

Sharing is caring on Social Media

Reddit
Telegram
LinkedIn
Xing
Twitter
Whatsapp
Facebook
Flipboard

📰 10 critical vulnerabilities affecting VMware Workspace ONE Access, Identity Manager, vRealize Automation, Cloud Foundation & vRealize Suite Lifecycle Manager


📈 35.53 Punkte
📰 IT Security Nachrichten

🕵️ CVE-2023-20855 | VMware vRealize Orchestrator prior 8.11.1 XML Parser xml external entity reference (VMSA-2023-0005)


📈 34.8 Punkte
🕵️ Sicherheitslücken

🕵️ VMware vCenter Operations/vRealize Orchestrator Apache Commons Collections Library Serialized Java Object erweiterte Rechte


📈 33.66 Punkte
🕵️ Sicherheitslücken

🕵️ VMware vCenter Operations/vRealize Orchestrator Apache Commons Collections Library Serialized Java Object erweiterte Rechte


📈 33.66 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2021-31684 | Oracle JD Edwards EnterpriseOne Orchestrator up to 9.2.6.3 E1 IOT Orchestrator denial of service


📈 32.93 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2020-36518 | Oracle JD Edwards EnterpriseOne Orchestrator up to 9.2.6.4 E1 IOT Orchestrator Security denial of service


📈 32.93 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2019-4398 | IBM Cloud Orchestrator/Cloud Orchestrator Enterprise up to 2.5.0.9 Session Management Cookie missing encryption (XFDB-162259)


📈 32.93 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2019-4397 | IBM Cloud Orchestrator/Cloud Orchestrator Enterprise up to 2.5.0.9 information disclosure (XFDB-162239)


📈 32.93 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-1436 | Oracle JD Edwards EnterpriseOne Orchestrator Prior to 9.2.8.0 E1 IOT Orchestrator Security denial of service


📈 32.93 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-22022 | Veeam Recovery Orchestrator/Availability Orchestrator access control


📈 32.93 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2019-12086 | Oracle JD Edwards EnterpriseOne Orchestrator 9.2 E1 IOT Orchestrator Security information disclosure (ID 176941 / BID-109227)


📈 32.93 Punkte
🕵️ Sicherheitslücken

🕵️ VMware vRealize Automation Plugin on Jenkins config.xml information disclosure


📈 31.8 Punkte
🕵️ Sicherheitslücken

🕵️ Oracle JD Edwards EnterpriseOne Orchestrator 9.2 IoT Orchestrator Security directory traversal


📈 31.78 Punkte
🕵️ Sicherheitslücken

🕵️ Oracle JD Edwards EnterpriseOne Orchestrator up to 9.2.4 E1 IOT Orchestrator Security deserialization


📈 31.78 Punkte
🕵️ Sicherheitslücken

🕵️ Oracle JD Edwards EnterpriseOne Orchestrator up to 9.2.5.0 E1 IOT Orchestrator Security information disclosure


📈 31.78 Punkte
🕵️ Sicherheitslücken

🕵️ Oracle JD Edwards EnterpriseOne Orchestrator up to 9.2.5.2 E1 IOT Orchestrator Security deserialization


📈 31.78 Punkte
🕵️ Sicherheitslücken

🕵️ McAfee ePolicy Orchestrator 4.6.7 ePolicy Orchestrator XML access control


📈 31.78 Punkte
🕵️ Sicherheitslücken

🕵️ jenkins-cloudformation-plugin Plugin on Jenkins config.xml information disclosure


📈 28.06 Punkte
🕵️ Sicherheitslücken

🕵️ Mail Commander Plugin for Jenkins-ci Plugin up to 1.0.0 on Jenkins credentials storage


📈 28.06 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-0881 | Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel Plugin Ajax Action access control


📈 27.66 Punkte
🕵️ Sicherheitslücken

🕵️ VMware vRealize Operations up to 8.3 Manager API server-side request forgery


📈 27.35 Punkte
🕵️ Sicherheitslücken

💾 VMware vRealize Operations Manager Server-Side Request Forgery / Code Execution


📈 27.35 Punkte
💾 IT Security Tools

⚠️ #0daytoday #VMware vRealize Operations Manager Server-Side Request Forgery / Code Execution Exploit [#0day #Exploit]


📈 27.35 Punkte
⚠️ PoC

🕵️ Jenkins Git Plugin bis 3.9.0 AssemblaWeb.java GET Request Server-Side Request Forgery


📈 27.31 Punkte
🕵️ Sicherheitslücken

🕵️ Jenkins CAS Plugin bis 1.4.1 CasSecurityRealm.java GET Request Server-Side Request Forgery


📈 27.31 Punkte
🕵️ Sicherheitslücken

🕵️ Jenkins GitHub Branch Source Plugin bis 2.3.4 Endpoint.java GET Request Server-Side Request Forgery


📈 27.31 Punkte
🕵️ Sicherheitslücken

🕵️ Jenkins GitHub Plugin bis 1.29.0 GitHubPluginConfig.java GET Request Server-Side Request Forgery


📈 27.31 Punkte
🕵️ Sicherheitslücken

🕵️ Jenkins URLTrigger Plugin bis 0.41 URLTrigger.java GET Request Server-Side Request Forgery


📈 27.31 Punkte
🕵️ Sicherheitslücken

🕵️ URLTrigger Plugin up to 0.41 on Jenkins URLTrigger.java GET Request Server-Side Request Forgery


📈 27.31 Punkte
🕵️ Sicherheitslücken

🕵️ CAS Plugin up to 1.4.1 on Jenkins CasSecurityRealm.java GET Request Server-Side Request Forgery


📈 27.31 Punkte
🕵️ Sicherheitslücken

🕵️ GitHub Branch Source Plugin up to 2.3.4 on Jenkins Endpoint.java GET Request Server-Side Request Forgery


📈 27.31 Punkte
🕵️ Sicherheitslücken

🕵️ GitHub Plugin up to 1.29.0 on Jenkins GitHubPluginConfig.java GET Request Server-Side Request Forgery


📈 27.31 Punkte
🕵️ Sicherheitslücken

🕵️ Git Plugin up to 3.9.0 on Jenkins AssemblaWeb.java GET Request Server-Side Request Forgery


📈 27.31 Punkte
🕵️ Sicherheitslücken

🕵️ Kanboard Plugin up to 1.5.10 on Jenkins KanboardGlobalConfiguration.java GET Request Server-Side Request Forgery


📈 27.31 Punkte
🕵️ Sicherheitslücken

🕵️ McAfee ePolicy Orchestrator 2.0/2.5/2.5.1 POST Request computerlist Format String


📈 26.8 Punkte
🕵️ Sicherheitslücken

matomo
•