Skip to content
Sign in
Not rated

CVE-2019-16575 A cross-site request forgery vulnerability in Jenkins Alauda Kubernetes Suport Plugin 2.3.0 and earlier allows attackers…

Description

A cross-site request forgery vulnerability in Jenkins Alauda Kubernetes Suport Plugin 2.3.0 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing the Kubernetes service account token or credentials stored in Jenkins.

Affected products and versions

Product Affected versions Fixed in
Jenkins Alauda Kubernetes Suport Plugin 2.3 earliest → 2.3.0 No fix stated

Other CVEs of Jenkins Alauda Kubernetes Suport Plugin

The 2 CVEs of Jenkins Alauda Kubernetes Suport Plugin →
CVE-2019-16576 A missing permission check in Jenkins Alauda Kubernetes Suport Plugin 2.3.0 and earlier allows attackers with… Not rated
Track this CVE