Aller au contenu
Se connecter
Non notée

CVE-2019-1003019 An session fixation vulnerability exists in Jenkins GitHub Authentication Plugin 0.29 and earlier in…

Description

An session fixation vulnerability exists in Jenkins GitHub Authentication Plugin 0.29 and earlier in GithubSecurityRealm.java that allows unauthorized attackers to impersonate another user if they can control the pre-authentication session.

Produits et versions touchés

Produit Versions touchées Corrigé en
Jenkins GitHub Authentication Plugin Versions non publiées

Autres CVE de Jenkins GitHub Authentication Plugin

Les 3 CVE de Jenkins GitHub Authentication Plugin →
CVE-2019-10315 Jenkins GitHub Authentication Plugin 0.31 and earlier did not use the state parameter of OAuth to prevent CSRF Non notée CVE-2019-1003018 An exposure of sensitive information vulnerability exists in Jenkins GitHub Authentication Plugin 0.29 and earlier in… Non notée
Suivre cette CVE