Se connecter

Non notée

CVE-2019-10309 Jenkins Self-Organizing Swarm Plug-in Modules Plugin clients that use UDP broadcasts to discover Jenkins masters do…

Description

Jenkins Self-Organizing Swarm Plug-in Modules Plugin clients that use UDP broadcasts to discover Jenkins masters do not prevent XML External Entity processing when processing the responses, allowing unauthorized attackers on the same network to read arbitrary files from Swarm clients.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Jenkins Self-Organizing Swarm Plug-in Modules Plugin	Versions non publiées

Les 3 CVE de Jenkins Self-Organizing Swarm Plug-in Modules Plugin →

CVE-2020-2191 Jenkins Self-Organizing Swarm Plug-in Modules Plugin 3.20 and earlier does not check permissions on API endpoints that… Non notée CVE-2020-2192 A cross-site request forgery vulnerability in Jenkins Self-Organizing Swarm Plug-in Modules Plugin 3.20 and earlier… Non notée

Vous utilisez Jenkins Self-Organizing Swarm Plug-in Modules Plugin ?

Suivre cette CVE Surveiller Jenkins Self-Organizing Swarm Plug-in Modules Plugin Vérifier mes SBOM

www.cveye.io/fr/cve/CVE-2019-10309

Chronologie

Publiée 30 avril 2019
Dernière modification 4 août 2024

Références

[oss-security] 20190430 Multiple vulnerabilities in Jenkins plugins www.openwall.com
108159 www.securityfocus.com
www.talosintelligence.com www.talosintelligence.com
jenkins.io jenkins.io

Suivre cette CVE