Not rated

CVE-2019-10457 A missing permission check in Jenkins Oracle Cloud Infrastructure Compute Classic Plugin allows attackers with…

Description

A missing permission check in Jenkins Oracle Cloud Infrastructure Compute Classic Plugin allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins Oracle Cloud Infrastructure Compute Classic Plugin	Versions not published

The 2 CVEs of Jenkins Oracle Cloud Infrastructure Compute Classic Plugin →

CVE-2019-10456 A cross-site request forgery vulnerability in Jenkins Oracle Cloud Infrastructure Compute Classic Plugin allows… Not rated

Do you use Jenkins Oracle Cloud Infrastructure Compute Classic Plugin?

Track this CVE Watch Jenkins Oracle Cloud Infrastructure Compute Classic Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2019-10457

Timeline

Published October 16, 2019
Last modified August 4, 2024

References

jenkins.io jenkins.io
[oss-security] 20191016 Multiple vulnerabilities in Jenkins plugins www.openwall.com

Track this CVE

CVE-2019-10457 A missing permission check in Jenkins Oracle Cloud Infrastructure Compute Classic Plugin allows attackers with…

Description

Affected products and versions

Other CVEs of Jenkins Oracle Cloud Infrastructure Compute Classic Plugin