Not rated

CVE-2019-10290 A missing permission check in Jenkins Netsparker Cloud Scan Plugin 1.1.5 and older in the…

Description

A missing permission check in Jenkins Netsparker Cloud Scan Plugin 1.1.5 and older in the NCScanBuilder.DescriptorImpl#doValidateAPI form validation method allowed attackers with Overall/Read permission to initiate a connection to an attacker-specified server.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins Netsparker Cloud Scan Plugin	Versions not published

The 3 CVEs of Jenkins Netsparker Cloud Scan Plugin →

CVE-2019-10289 A cross-site request forgery vulnerability in Jenkins Netsparker Cloud Scan Plugin 1.1.5 and older in the… Not rated CVE-2019-10291 Jenkins Netsparker Cloud Scan Plugin 1.1.5 and older stored credentials unencrypted in its global configuration file… Not rated

Do you use Jenkins Netsparker Cloud Scan Plugin?

Track this CVE Watch Jenkins Netsparker Cloud Scan Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2019-10290

Timeline

Published April 4, 2019
Last modified August 4, 2024

References

107790 www.securityfocus.com
[oss-security] 20190413 Re: Multiple vulnerabilities in Jenkins plugins www.openwall.com
jenkins.io jenkins.io

Track this CVE

CVE-2019-10290 A missing permission check in Jenkins Netsparker Cloud Scan Plugin 1.1.5 and older in the…

Description

Affected products and versions

Other CVEs of Jenkins Netsparker Cloud Scan Plugin