Not rated

CVE-2019-1003043 A missing permission check in Jenkins Slack Notification Plugin 2.19 and earlier allows attackers with Overall/Read…

Description

A missing permission check in Jenkins Slack Notification Plugin 2.19 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins Slack Notification Plugin	Versions not published

The 2 CVEs of Jenkins Slack Notification Plugin →

CVE-2019-1003044 A cross-site request forgery vulnerability in Jenkins Slack Notification Plugin 2.19 and earlier allows attackers to… Not rated

Do you use Jenkins Slack Notification Plugin?

Track this CVE Watch Jenkins Slack Notification Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2019-1003043

Timeline

Published March 28, 2019
Last modified August 5, 2024

References

[oss-security] 20190328 Re: Multiple vulnerabilities in Jenkins plugins www.openwall.com
107628 www.securityfocus.com
jenkins.io jenkins.io

Track this CVE

CVE-2019-1003043 A missing permission check in Jenkins Slack Notification Plugin 2.19 and earlier allows attackers with Overall/Read…

Description

Affected products and versions

Other CVEs of Jenkins Slack Notification Plugin