Jenkins Project Jenkins Parameterized Remote Trigger Plugin
3 CVEs affecting Jenkins Project Jenkins Parameterized Remote Trigger Plugin. Latest disclosed: 2026-09-02. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-84676 | Medium | 4.3 | 2026-09-02 | Jenkins Parameterized Remote Trigger Plugin 3.2.2 and earlier stores tokens unencrypted in job config.xml files on the Jenkins controller where they can be vie… |
CVE-2026-70438 | Medium | 4.3 | 2026-08-05 | A missing permission check in Jenkins Parameterized Remote Trigger Plugin 3.2.2 and earlier allows attackers with Overall/Read permission to enumerate credenti… |
CVE-2020-2239 | Medium | 4.3 | 2020-09-01 | Jenkins Parameterized Remote Trigger Plugin 3.1.3 and earlier stores a secret unencrypted in its global configuration file on the Jenkins controller where it c… |