Not rated

CVE-2019-16576 A missing permission check in Jenkins Alauda Kubernetes Suport Plugin 2.3.0 and earlier allows attackers with…

Description

A missing permission check in Jenkins Alauda Kubernetes Suport Plugin 2.3.0 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing the Kubernetes service account token or credentials stored in Jenkins.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins Alauda Kubernetes Suport Plugin 2.3	earliest → 2.3.0	No fix stated

The 2 CVEs of Jenkins Alauda Kubernetes Suport Plugin →

CVE-2019-16575 A cross-site request forgery vulnerability in Jenkins Alauda Kubernetes Suport Plugin 2.3.0 and earlier allows attackers… Not rated

Do you use Jenkins Alauda Kubernetes Suport Plugin?

Track this CVE Watch Jenkins Alauda Kubernetes Suport Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2019-16576

Timeline

Published December 17, 2019
Last modified August 5, 2024

References

jenkins.io jenkins.io
[oss-security] 20191217 Multiple vulnerabilities in Jenkins plugins www.openwall.com

Track this CVE

CVE-2019-16576 A missing permission check in Jenkins Alauda Kubernetes Suport Plugin 2.3.0 and earlier allows attackers with…

Description

Affected products and versions

Other CVEs of Jenkins Alauda Kubernetes Suport Plugin