Not rated

CVE-2019-10338 A cross-site request forgery vulnerability in Jenkins JX Resources Plugin 1.0.36 and earlier in…

Description

A cross-site request forgery vulnerability in Jenkins JX Resources Plugin 1.0.36 and earlier in GlobalPluginConfiguration#doValidateClient allowed attackers to have Jenkins connect to an attacker-specified Kubernetes server, potentially leaking credentials.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins JX Resources Plugin	Versions not published

The 2 CVEs of Jenkins JX Resources Plugin →

CVE-2019-10339 A missing permission check in Jenkins JX Resources Plugin 1.0.36 and earlier in… Not rated

Do you use Jenkins JX Resources Plugin?

Track this CVE Watch Jenkins JX Resources Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2019-10338

Timeline

Published June 11, 2019
Last modified August 4, 2024

References

[oss-security] 20190611 Multiple vulnerabilities in Jenkins plugins www.openwall.com
108747 www.securityfocus.com
jenkins.io jenkins.io

Track this CVE

CVE-2019-10338 A cross-site request forgery vulnerability in Jenkins JX Resources Plugin 1.0.36 and earlier in…

Description

Affected products and versions

Other CVEs of Jenkins JX Resources Plugin