Aller au contenu
Se connecter
Non notée

CVE-2019-10342 A missing permission check in Jenkins Docker Plugin 1.1.6 and earlier in various 'fillCredentialsIdItems' methods…

Description

A missing permission check in Jenkins Docker Plugin 1.1.6 and earlier in various 'fillCredentialsIdItems' methods allowed users with Overall/Read access to enumerate credentials ID of credentials stored in Jenkins.

Produits et versions touchés

Produit Versions touchées Corrigé en
Jenkins Docker Plugin Versions non publiées

Autres CVE de Jenkins Docker Plugin

Les 3 CVE de Jenkins Docker Plugin →
CVE-2019-10340 A cross-site request forgery vulnerability in Jenkins Docker Plugin 1.1.6 and earlier in… Non notée CVE-2019-10341 A missing permission check in Jenkins Docker Plugin 1.1.6 and earlier in DockerAPI.DescriptorImpl#doTestConnection… Non notée
Suivre cette CVE