Dash board

referentiel Dash board

Vulnerabilité	Description	Recommandation
CVE-2022-34801 CWE-318 Reference url : https://www.jenkins.io/security/advisory/2022-06-3 Vulnerabilité CVE-2022-34801 CWE-318 Reference url : https://www.jenkins.io/security/advisory/2022-06-30/#SECURITY-2056 Reference name : https://www.jenkins.io/security/advisory/2022-06-30/#SECURITY-2056 Reference source : CONFIRM Reference tags : Vendor Advisory Reference lang :en Reference description : Jenkins Build Notifications Plugin 1.5.0 and earlier transmits tokens in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure.	impact BaseMetrcicV3 Cssv3 vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N Description impact BaseMetrcicV3 Cssv3 vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N impact BaseMetrcicV3 Cssv3 attackVector : NETWORK impact BaseMetrcicV3 Cssv3 privilegesRequired : LOW impact BaseMetrcicV3 Cssv3 scope : UNCHANGED impact BaseMetrcicV3 Cssv3 confidentialityImpact : LOW impact BaseMetrcicV3 Cssv3 integrityImpact : NONE impact BaseMetrcicV3 Cssv3 availabilityImpact : NONE impact BaseMetrcicV3 Cssv3 baseScore : 4.3 impact BaseMetrcicV3 Cssv3 baseSeverity : MEDIUM	Severity : MEDIUM Recomandation Severity : MEDIUM Statut :
CVE-2022-34801 CWE-318 Reference url : https://www.jenkins.io/security/advisory/2022-06-3 Vulnerabilité CVE-2022-34801 CWE-318 Reference url : https://www.jenkins.io/security/advisory/2022-06-30/#SECURITY-2056 Reference name : https://www.jenkins.io/security/advisory/2022-06-30/#SECURITY-2056 Reference source : CONFIRM Reference tags : Vendor Advisory Reference lang :en Reference description : Jenkins Build Notifications Plugin 1.5.0 and earlier transmits tokens in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure.	impact BaseMetrcicV3 Cssv3 vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N Description impact BaseMetrcicV3 Cssv3 vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N impact BaseMetrcicV3 Cssv3 attackVector : NETWORK impact BaseMetrcicV3 Cssv3 privilegesRequired : LOW impact BaseMetrcicV3 Cssv3 scope : UNCHANGED impact BaseMetrcicV3 Cssv3 confidentialityImpact : LOW impact BaseMetrcicV3 Cssv3 integrityImpact : NONE impact BaseMetrcicV3 Cssv3 availabilityImpact : NONE impact BaseMetrcicV3 Cssv3 baseScore : 4.3 impact BaseMetrcicV3 Cssv3 baseSeverity : MEDIUM	Severity : MEDIUM Recomandation Severity : MEDIUM Statut :
CVE-2022-34802 CWE-256 Reference url : https://www.jenkins.io/security/advisory/2022-06-3 Vulnerabilité CVE-2022-34802 CWE-256 Reference url : https://www.jenkins.io/security/advisory/2022-06-30/#SECURITY-2088 Reference name : https://www.jenkins.io/security/advisory/2022-06-30/#SECURITY-2088 Reference source : CONFIRM Reference tags : Vendor Advisory Reference lang :en Reference description : Jenkins RocketChat Notifier Plugin 1.5.2 and earlier stores the login password and webhook token unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system.	impact BaseMetrcicV3 Cssv3 vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N Description impact BaseMetrcicV3 Cssv3 vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N impact BaseMetrcicV3 Cssv3 attackVector : NETWORK impact BaseMetrcicV3 Cssv3 privilegesRequired : LOW impact BaseMetrcicV3 Cssv3 scope : UNCHANGED impact BaseMetrcicV3 Cssv3 confidentialityImpact : LOW impact BaseMetrcicV3 Cssv3 integrityImpact : NONE impact BaseMetrcicV3 Cssv3 availabilityImpact : NONE impact BaseMetrcicV3 Cssv3 baseScore : 4.3 impact BaseMetrcicV3 Cssv3 baseSeverity : MEDIUM	Severity : MEDIUM Recomandation Severity : MEDIUM Statut :
CVE-2022-34802 CWE-256 Reference url : https://www.jenkins.io/security/advisory/2022-06-3 Vulnerabilité CVE-2022-34802 CWE-256 Reference url : https://www.jenkins.io/security/advisory/2022-06-30/#SECURITY-2088 Reference name : https://www.jenkins.io/security/advisory/2022-06-30/#SECURITY-2088 Reference source : CONFIRM Reference tags : Vendor Advisory Reference lang :en Reference description : Jenkins RocketChat Notifier Plugin 1.5.2 and earlier stores the login password and webhook token unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system.	impact BaseMetrcicV3 Cssv3 vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N Description impact BaseMetrcicV3 Cssv3 vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N impact BaseMetrcicV3 Cssv3 attackVector : NETWORK impact BaseMetrcicV3 Cssv3 privilegesRequired : LOW impact BaseMetrcicV3 Cssv3 scope : UNCHANGED impact BaseMetrcicV3 Cssv3 confidentialityImpact : LOW impact BaseMetrcicV3 Cssv3 integrityImpact : NONE impact BaseMetrcicV3 Cssv3 availabilityImpact : NONE impact BaseMetrcicV3 Cssv3 baseScore : 4.3 impact BaseMetrcicV3 Cssv3 baseSeverity : MEDIUM	Severity : MEDIUM Recomandation Severity : MEDIUM Statut :
CVE-2022-34802 CWE-256 Reference url : https://www.jenkins.io/security/advisory/2022-06-3 Vulnerabilité CVE-2022-34802 CWE-256 Reference url : https://www.jenkins.io/security/advisory/2022-06-30/#SECURITY-2088 Reference name : https://www.jenkins.io/security/advisory/2022-06-30/#SECURITY-2088 Reference source : CONFIRM Reference tags : Vendor Advisory Reference lang :en Reference description : Jenkins RocketChat Notifier Plugin 1.5.2 and earlier stores the login password and webhook token unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system.	impact BaseMetrcicV3 Cssv3 vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N Description impact BaseMetrcicV3 Cssv3 vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N impact BaseMetrcicV3 Cssv3 attackVector : NETWORK impact BaseMetrcicV3 Cssv3 privilegesRequired : LOW impact BaseMetrcicV3 Cssv3 scope : UNCHANGED impact BaseMetrcicV3 Cssv3 confidentialityImpact : LOW impact BaseMetrcicV3 Cssv3 integrityImpact : NONE impact BaseMetrcicV3 Cssv3 availabilityImpact : NONE impact BaseMetrcicV3 Cssv3 baseScore : 4.3 impact BaseMetrcicV3 Cssv3 baseSeverity : MEDIUM	Severity : MEDIUM Recomandation Severity : MEDIUM Statut :
CVE-2022-34803 CWE-256 Reference url : https://www.jenkins.io/security/advisory/2022-06-3 Vulnerabilité CVE-2022-34803 CWE-256 Reference url : https://www.jenkins.io/security/advisory/2022-06-30/#SECURITY-1877 Reference name : https://www.jenkins.io/security/advisory/2022-06-30/#SECURITY-1877 Reference source : CONFIRM Reference tags : Vendor Advisory Reference lang :en Reference description : Jenkins OpsGenie Plugin 1.9 and earlier stores API keys unencrypted in its global configuration file and in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission (config.xml), or access to the Jenkins controller file system.	impact BaseMetrcicV3 Cssv3 vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N Description impact BaseMetrcicV3 Cssv3 vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N impact BaseMetrcicV3 Cssv3 attackVector : NETWORK impact BaseMetrcicV3 Cssv3 privilegesRequired : LOW impact BaseMetrcicV3 Cssv3 scope : UNCHANGED impact BaseMetrcicV3 Cssv3 confidentialityImpact : LOW impact BaseMetrcicV3 Cssv3 integrityImpact : NONE impact BaseMetrcicV3 Cssv3 availabilityImpact : NONE impact BaseMetrcicV3 Cssv3 baseScore : 4.3 impact BaseMetrcicV3 Cssv3 baseSeverity : MEDIUM	Severity : MEDIUM Recomandation Severity : MEDIUM Statut :
CVE-2022-34803 CWE-256 Reference url : https://www.jenkins.io/security/advisory/2022-06-3 Vulnerabilité CVE-2022-34803 CWE-256 Reference url : https://www.jenkins.io/security/advisory/2022-06-30/#SECURITY-1877 Reference name : https://www.jenkins.io/security/advisory/2022-06-30/#SECURITY-1877 Reference source : CONFIRM Reference tags : Vendor Advisory Reference lang :en Reference description : Jenkins OpsGenie Plugin 1.9 and earlier stores API keys unencrypted in its global configuration file and in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission (config.xml), or access to the Jenkins controller file system.	impact BaseMetrcicV3 Cssv3 vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N Description impact BaseMetrcicV3 Cssv3 vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N impact BaseMetrcicV3 Cssv3 attackVector : NETWORK impact BaseMetrcicV3 Cssv3 privilegesRequired : LOW impact BaseMetrcicV3 Cssv3 scope : UNCHANGED impact BaseMetrcicV3 Cssv3 confidentialityImpact : LOW impact BaseMetrcicV3 Cssv3 integrityImpact : NONE impact BaseMetrcicV3 Cssv3 availabilityImpact : NONE impact BaseMetrcicV3 Cssv3 baseScore : 4.3 impact BaseMetrcicV3 Cssv3 baseSeverity : MEDIUM	Severity : MEDIUM Recomandation Severity : MEDIUM Statut :
CVE-2022-34803 CWE-256 Reference url : https://www.jenkins.io/security/advisory/2022-06-3 Vulnerabilité CVE-2022-34803 CWE-256 Reference url : https://www.jenkins.io/security/advisory/2022-06-30/#SECURITY-1877 Reference name : https://www.jenkins.io/security/advisory/2022-06-30/#SECURITY-1877 Reference source : CONFIRM Reference tags : Vendor Advisory Reference lang :en Reference description : Jenkins OpsGenie Plugin 1.9 and earlier stores API keys unencrypted in its global configuration file and in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission (config.xml), or access to the Jenkins controller file system.	impact BaseMetrcicV3 Cssv3 vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N Description impact BaseMetrcicV3 Cssv3 vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N impact BaseMetrcicV3 Cssv3 attackVector : NETWORK impact BaseMetrcicV3 Cssv3 privilegesRequired : LOW impact BaseMetrcicV3 Cssv3 scope : UNCHANGED impact BaseMetrcicV3 Cssv3 confidentialityImpact : LOW impact BaseMetrcicV3 Cssv3 integrityImpact : NONE impact BaseMetrcicV3 Cssv3 availabilityImpact : NONE impact BaseMetrcicV3 Cssv3 baseScore : 4.3 impact BaseMetrcicV3 Cssv3 baseSeverity : MEDIUM	Severity : MEDIUM Recomandation Severity : MEDIUM Statut :
CVE-2022-2264 CWE-122 Reference url : https://github.com/vim/vim/commit/d25f003342aca9889 Vulnerabilité CVE-2022-2264 CWE-122 Reference url : https://github.com/vim/vim/commit/d25f003342aca9889067f2e839963dfeccf1fe05 Reference name : https://github.com/vim/vim/commit/d25f003342aca9889067f2e839963dfeccf1fe05 Reference source : MISC Reference tags : Patch Reference lang :en Reference description : Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.	impact BaseMetrcicV3 Cssv3 vectorString : CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Description impact BaseMetrcicV3 Cssv3 vectorString : CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H impact BaseMetrcicV3 Cssv3 attackVector : LOCAL impact BaseMetrcicV3 Cssv3 privilegesRequired : NONE impact BaseMetrcicV3 Cssv3 scope : UNCHANGED impact BaseMetrcicV3 Cssv3 confidentialityImpact : HIGH impact BaseMetrcicV3 Cssv3 integrityImpact : HIGH impact BaseMetrcicV3 Cssv3 availabilityImpact : HIGH impact BaseMetrcicV3 Cssv3 baseScore : 7.8 impact BaseMetrcicV3 Cssv3 baseSeverity : HIGH	Severity : HIGH Recomandation Severity : HIGH Statut :
CVE-2022-2264 CWE-122 Reference url : https://github.com/vim/vim/commit/d25f003342aca9889 Vulnerabilité CVE-2022-2264 CWE-122 Reference url : https://github.com/vim/vim/commit/d25f003342aca9889067f2e839963dfeccf1fe05 Reference name : https://github.com/vim/vim/commit/d25f003342aca9889067f2e839963dfeccf1fe05 Reference source : MISC Reference tags : Patch Reference lang :en Reference description : Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.	impact BaseMetrcicV3 Cssv3 vectorString : CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Description impact BaseMetrcicV3 Cssv3 vectorString : CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H impact BaseMetrcicV3 Cssv3 attackVector : LOCAL impact BaseMetrcicV3 Cssv3 privilegesRequired : NONE impact BaseMetrcicV3 Cssv3 scope : UNCHANGED impact BaseMetrcicV3 Cssv3 confidentialityImpact : HIGH impact BaseMetrcicV3 Cssv3 integrityImpact : HIGH impact BaseMetrcicV3 Cssv3 availabilityImpact : HIGH impact BaseMetrcicV3 Cssv3 baseScore : 7.8 impact BaseMetrcicV3 Cssv3 baseSeverity : HIGH	Severity : HIGH Recomandation Severity : HIGH Statut :

<<
<
3
4
5(current)
6
7
>
>>