Skip to content
Sign in
Not rated

CVE-2019-16541 Jenkins JIRA Plugin 3.0.10 and earlier does not declare the correct (folder) scope for per-folder Jira site definitions,…

Description

Jenkins JIRA Plugin 3.0.10 and earlier does not declare the correct (folder) scope for per-folder Jira site definitions, allowing users to select and use credentials with System scope.

Affected products and versions

Product Affected versions Fixed in
Jenkins JIRA Plugin Versions not published

Other CVEs of Jenkins JIRA Plugin

The 3 CVEs of Jenkins JIRA Plugin →
CVE-2023-49653 Jenkins Jira Plugin 3.11 and earlier does not set the appropriate context for credentials lookup, allowing attackers… Not rated CVE-2022-29041 Jenkins Jira Plugin 3.7 and earlier, except 3.6.1, does not escape the name and description of Jira Issue and Jira… Not rated
Track this CVE