Non notée
CVE-2019-1003081 A missing permission check in Jenkins OpenShift Deployer Plugin in the…
Description
A missing permission check in Jenkins OpenShift Deployer Plugin in the DeployApplication.DeployApplicationDescriptor#doCheckLogin form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Jenkins OpenShift Deployer Plugin | Versions non publiées |
Références
- 107790 www.securityfocus.com
- [oss-security] 20190413 Re: Multiple vulnerabilities in Jenkins plugins www.openwall.com
- jenkins.io jenkins.io
Chronologie
- Publiée
- Dernière modification
Autres CVE de Jenkins OpenShift Deployer Plugin
Les 7 CVE de Jenkins OpenShift Deployer Plugin →
CVE-2022-36909
A missing permission check in Jenkins OpenShift Deployer Plugin 1.2.0 and earlier allows attackers with Overall/Read…
Non notée
CVE-2022-36908
A cross-site request forgery (CSRF) vulnerability in Jenkins OpenShift Deployer Plugin 1.2.0 and earlier allows…
Non notée
CVE-2022-36907
A missing permission check in Jenkins OpenShift Deployer Plugin 1.2.0 and earlier allows attackers with Overall/Read…
Non notée
CVE-2022-36906
A cross-site request forgery (CSRF) vulnerability in Jenkins OpenShift Deployer Plugin 1.2.0 and earlier allows…
Non notée