Not rated

CVE-2019-10339 A missing permission check in Jenkins JX Resources Plugin 1.0.36 and earlier in…

Description

A missing permission check in Jenkins JX Resources Plugin 1.0.36 and earlier in GlobalPluginConfiguration#doValidateClient allowed users with Overall/Read access to have Jenkins connect to an attacker-specified Kubernetes server, potentially leaking credentials.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins JX Resources Plugin	Versions not published

The 2 CVEs of Jenkins JX Resources Plugin →

CVE-2019-10338 A cross-site request forgery vulnerability in Jenkins JX Resources Plugin 1.0.36 and earlier in… Not rated

Do you use Jenkins JX Resources Plugin?

Track this CVE Watch Jenkins JX Resources Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2019-10339

Timeline

Published June 11, 2019
Last modified August 4, 2024

References

[oss-security] 20190611 Multiple vulnerabilities in Jenkins plugins www.openwall.com
108747 www.securityfocus.com
jenkins.io jenkins.io

Track this CVE

CVE-2019-10339 A missing permission check in Jenkins JX Resources Plugin 1.0.36 and earlier in…

Description

Affected products and versions

Other CVEs of Jenkins JX Resources Plugin