com.synopsys.integration vulnerabilities

Products

• com.synopsys.integration/synopsys-detect 1

Latest com.synopsys.integration CVEs

Newest publication first

1. CVE-2018-1000191 Jenkins Black Duck Detect Plugin information exposure vulnerability

   Published 2018-06-05

   Medium·CVSS 6.5 EPSS 0.99%

   A exposure of sensitive information vulnerability exists in Jenkins Black Duck Detect Plugin 1.4.0 and older in DetectPostBuildStepDescriptor.java that allows attackers with Overall/Read access to connect to an attacker-specified URL using attacker-specified credentials IDs obtai...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.