Not rated

CVE-2019-10474 A missing permission check in Jenkins Global Post Script Plugin in allowed users with Overall/Read access to list the…

Description

A missing permission check in Jenkins Global Post Script Plugin in allowed users with Overall/Read access to list the scripts available to the plugin stored on the Jenkins master file system.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins Global Post Script Plugin	Versions not published

Do you use Jenkins Global Post Script Plugin?

Track this CVE Watch Jenkins Global Post Script Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2019-10474

Timeline

Published October 23, 2019
Last modified August 4, 2024

References

jenkins.io jenkins.io
[oss-security] 20191023 Multiple vulnerabilities in Jenkins plugins www.openwall.com

Track this CVE