Not rated

CVE-2019-10312 A missing permission check in Jenkins Ansible Tower Plugin 0.9.1 and earlier in the…

Description

A missing permission check in Jenkins Ansible Tower Plugin 0.9.1 and earlier in the TowerInstallation.TowerInstallationDescriptor#doFillTowerCredentialsIdItems method allowed attackers with Overall/Read permission to enumerate credentials ID of credentials stored in Jenkins.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins Ansible Tower Plugin	Versions not published

The 3 CVEs of Jenkins Ansible Tower Plugin →

CVE-2019-10310 A cross-site request forgery vulnerability in Jenkins Ansible Tower Plugin 0.9.1 and earlier in the… Not rated CVE-2019-10311 A missing permission check in Jenkins Ansible Tower Plugin 0.9.1 and earlier in the… Not rated

Do you use Jenkins Ansible Tower Plugin?

Track this CVE Watch Jenkins Ansible Tower Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2019-10312

Timeline

Published April 30, 2019
Last modified August 4, 2024

References

[oss-security] 20190430 Multiple vulnerabilities in Jenkins plugins www.openwall.com
108159 www.securityfocus.com
jenkins.io jenkins.io

Track this CVE

CVE-2019-10312 A missing permission check in Jenkins Ansible Tower Plugin 0.9.1 and earlier in the…

Description

Affected products and versions

Other CVEs of Jenkins Ansible Tower Plugin