Jenkins Ant Plugin vulnerabilities

CVE-2018-1000008 [HIGH] Jenkins Security Advisory 2018-01-22 Title: Jenkins Security Advisory 2018-01-22 Jenkins Security Advisory 2018-01-22 Jenkins Security Home For Administrators Overview Terminology Vulnerabilities and Scoring Security Advisories Security Issues Advisory Schedule Vulnerabilities in Plugins How We Fix Security Issues For Reporters Reporting Vulnerabilities Jenkins CNA For Maintainers Overvi

CVE-2011-4969 [MEDIUM] Jenkins Security Advisory 2017-02-01 Title: Jenkins Security Advisory 2017-02-01 Jenkins Security Advisory 2017-02-01 This advisory announces multiple vulnerabilities in Jenkins. Description Use of AES ECB block cipher mode without IV for encrypting secrets SECURITY-304 / CVE-2017-2598 Secrets such as passwords are typically stored on disk and sent to users as part of some pages in encrypted form. These were encrypted