Skip to content
Sign in
Not rated

CVE-2019-1003018 An exposure of sensitive information vulnerability exists in Jenkins GitHub Authentication Plugin 0.29 and earlier in…

Description

An exposure of sensitive information vulnerability exists in Jenkins GitHub Authentication Plugin 0.29 and earlier in GithubSecurityRealm/config.jelly that allows attackers able to view a Jenkins administrator's web browser output, or control the browser (e.g. malicious extension) to retrieve the configured client secret.

Affected products and versions

Product Affected versions Fixed in
Jenkins GitHub Authentication Plugin Versions not published

Other CVEs of Jenkins GitHub Authentication Plugin

The 3 CVEs of Jenkins GitHub Authentication Plugin →
CVE-2019-10315 Jenkins GitHub Authentication Plugin 0.31 and earlier did not use the state parameter of OAuth to prevent CSRF Not rated CVE-2019-1003019 An session fixation vulnerability exists in Jenkins GitHub Authentication Plugin 0.29 and earlier in… Not rated
Track this CVE