VendorsJenkinsspira_importerall versions
Vulnerabilities

Jenkins Spira Importer

Ranked by severity, then by exploit likelihood, unless you sort otherwise. Click a CVE ID for its full record.

2CVEs
CVE-2019-16558
Jenkins Spira Importer Plugin 3.2.3 and earlier disables SSL/TLS certificate validation for the Jenkins master JVM.
Published 2019-12-17 · Modified
8.2EPSS 0.006
CVE-2019-16543
Jenkins Spira Importer Plugin 3.2.2 and earlier stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.
Published 2019-11-21 · Modified
5.5EPSS 0.003