Skip to content
Sign in
Not rated

CVE-2019-1003019 An session fixation vulnerability exists in Jenkins GitHub Authentication Plugin 0.29 and earlier in…

Description

An session fixation vulnerability exists in Jenkins GitHub Authentication Plugin 0.29 and earlier in GithubSecurityRealm.java that allows unauthorized attackers to impersonate another user if they can control the pre-authentication session.

Affected products and versions

Product Affected versions Fixed in
Jenkins GitHub Authentication Plugin Versions not published

Other CVEs of Jenkins GitHub Authentication Plugin

The 3 CVEs of Jenkins GitHub Authentication Plugin →
CVE-2019-10315 Jenkins GitHub Authentication Plugin 0.31 and earlier did not use the state parameter of OAuth to prevent CSRF Not rated CVE-2019-1003018 An exposure of sensitive information vulnerability exists in Jenkins GitHub Authentication Plugin 0.29 and earlier in… Not rated
Track this CVE