Not rated
CVE-2019-1003081 A missing permission check in Jenkins OpenShift Deployer Plugin in the…
Description
A missing permission check in Jenkins OpenShift Deployer Plugin in the DeployApplication.DeployApplicationDescriptor#doCheckLogin form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Jenkins OpenShift Deployer Plugin | Versions not published |
References
- 107790 www.securityfocus.com
- [oss-security] 20190413 Re: Multiple vulnerabilities in Jenkins plugins www.openwall.com
- jenkins.io jenkins.io
Timeline
- Published
- Last modified
Other CVEs of Jenkins OpenShift Deployer Plugin
The 7 CVEs of Jenkins OpenShift Deployer Plugin →
CVE-2022-36909
A missing permission check in Jenkins OpenShift Deployer Plugin 1.2.0 and earlier allows attackers with Overall/Read…
Not rated
CVE-2022-36908
A cross-site request forgery (CSRF) vulnerability in Jenkins OpenShift Deployer Plugin 1.2.0 and earlier allows…
Not rated
CVE-2022-36907
A missing permission check in Jenkins OpenShift Deployer Plugin 1.2.0 and earlier allows attackers with Overall/Read…
Not rated
CVE-2022-36906
A cross-site request forgery (CSRF) vulnerability in Jenkins OpenShift Deployer Plugin 1.2.0 and earlier allows…
Not rated