Not rated

CVE-2019-1003028 A server-side request forgery vulnerability exists in Jenkins JMS Messaging Plugin 1.1.1 and earlier in…

Description

A server-side request forgery vulnerability exists in Jenkins JMS Messaging Plugin 1.1.1 and earlier in SSLCertificateAuthenticationMethod.java, UsernameAuthenticationMethod.java that allows attackers with Overall/Read permission to have Jenkins connect to a JMS endpoint.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins JMS Messaging Plugin	Versions not published

Do you use Jenkins JMS Messaging Plugin?

Track this CVE Watch Jenkins JMS Messaging Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2019-1003028

Timeline

Published February 20, 2019
Last modified August 5, 2024

References

jenkins.io jenkins.io
107295 www.securityfocus.com

Track this CVE