Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
6.5
CVSSv3

CVE-2019-1003081

Published: 04/04/2019 Updated: 25/10/2023
CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8
CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8
VMScore: 356
Vector: AV:N/AC:L/Au:S/C:N/I:P/A:N

Vulnerability Summary

A missing permission check in Jenkins OpenShift Deployer Plugin in the DeployApplication.DeployApplicationDescriptor#doCheckLogin form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

jenkins openshift deployer

Mailing Lists

Full Disclosure: Re: Multiple vulnerabilities in Jenkins plugins
CVE-2019-1003051 CVE-2019-1003052 CVE-2019-1003054 CVE-2019-1003053 CVE-2019-1003055 CVE-2019-1003056 CVE-2019-1003057 CVE-2019-1003058 (CSRF) and CVE-2019-1003059 (permission check) CVE-2019-1003060 CVE-2019-1003061 CVE-2019-1003062 CVE-2019-1003063 CVE-2019-1003064 CVE-2019-1003065 CVE-2019-1003066 CVE ...

References

CWE-862https://jenkins.io/security/advisory/2019-04-03/#SECURITY-981http://www.securityfocus.com/bid/107790http://www.openwall.com/lists/oss-security/2019/04/12/2https://nvd.nist.govhttp://seclists.org/oss-sec/2019/q2/22
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-5248CVE-2024-3110CVE-2024-5552CVE-2024-29415HTML injectionCVE-2024-3095TCPtype confusionCVE-2024-1800
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook