Not rated

CVE-2019-10365 Jenkins Google Kubernetes Engine Plugin 0.6.2 and earlier created a temporary file containing a temporary access token…

Description

Jenkins Google Kubernetes Engine Plugin 0.6.2 and earlier created a temporary file containing a temporary access token in the project workspace, where it could be accessed by users with Job/Read permission.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins Google Kubernetes Engine Plugin	Versions not published

References

[oss-security] 20190731 Multiple vulnerabilities in Jenkins plugins www.openwall.com
jenkins.io jenkins.io

Timeline

Published July 31, 2019
Last modified August 4, 2024

The 3 CVEs of Jenkins Google Kubernetes Engine Plugin →

CVE-2020-2121 Jenkins Google Kubernetes Engine Plugin 0.8.0 and earlier does not configure its YAML parser to prevent the… Not rated CVE-2019-10445 A missing permission check in Jenkins Google Kubernetes Engine Plugin 0.7.0 and earlier allowed attackers with… Not rated

Track this CVE

CVE-2019-10365 Jenkins Google Kubernetes Engine Plugin 0.6.2 and earlier created a temporary file containing a temporary access token…

Description

Affected products and versions

References

Timeline

Other CVEs of Jenkins Google Kubernetes Engine Plugin