Not rated

CVE-2019-10308 A missing permission check in Jenkins Static Analysis Utilities Plugin 1.95 and earlier in the…

Description

A missing permission check in Jenkins Static Analysis Utilities Plugin 1.95 and earlier in the DefaultGraphConfigurationView#doSave form handler method allowed attackers with Overall/Read permission to change the per-job default graph configuration for all users.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins Static Analysis Utilities Plugin	Versions not published

References

[oss-security] 20190430 Multiple vulnerabilities in Jenkins plugins www.openwall.com
108159 www.securityfocus.com
jenkins.io jenkins.io

Timeline

Published April 30, 2019
Last modified August 4, 2024

The 3 CVEs of Jenkins Static Analysis Utilities Plugin →

CVE-2020-2316 Jenkins Static Analysis Utilities Plugin 1.96 and earlier does not escape the annotation message in tooltips,… Not rated CVE-2019-10307 A cross-site request forgery vulnerability in Jenkins Static Analysis Utilities Plugin 1.95 and earlier in the… Not rated

Track this CVE

CVE-2019-10308 A missing permission check in Jenkins Static Analysis Utilities Plugin 1.95 and earlier in the…

Description

Affected products and versions

References

Timeline

Other CVEs of Jenkins Static Analysis Utilities Plugin