Published: 31/07/2019 Updated: 25/10/2023

CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8

CVSS v3 Base Score: 4.3 | Impact Score: 1.4 | Exploitability Score: 2.8

VMScore: 356

Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N

A missing permission check in Jenkins Pipeline: Shared Groovy Libraries Plugin 2.14 and previous versions allowed users with Overall/Read access to obtain limited information about the content of SCM repositories referenced by global libraries.

Vulnerable Product	Search on Vulmon	Subscribe to Product
jenkins pipeline\\ shared_groovy_libraries
redhat openshift container platform 3.11
redhat openshift container platform 4.1

Synopsis Important: Red Hat OpenShift Container Platform 311 jenkins-2-plugins security update Type/Severity Security Advisory: Important Topic An update for jenkins-2-plugins is now available for Red Hat OpenShift Container Platform 311Red Hat Product Security has rated this update as having a security ...

Synopsis Important: Red Hat OpenShift Container Platform 41 jenkins-2-plugins security update Type/Severity Security Advisory: Important Topic An update for jenkins-2-plugins is now available for Red Hat OpenShift Container Platform 41Red Hat Product Security has rated this update as having a security im ...

Synopsis Important: OpenShift Container Platform 4114 security and bug fix update Type/Severity Security Advisory: Important Topic An update is now available for Red Hat OpenShift Container Platform 41Red Hat Product Security has rated this update as having a security impact of Important A Common Vulne ...

Impact: Moderate Public Date: 2019-08-01 CWE: CWE-284 Bugzilla: 1735521: CVE-2019-10357 jenkins-plugin- ...

CWE-862 https://jenkins.io/security/advisory/2019-07-31/#SECURITY1422 http://www.openwall.com/lists/oss-security/2019/07/31/1 https://access.redhat.com/errata/RHSA-2019:2651 https://access.redhat.com/errata/RHSA-2019:2594 https://access.redhat.com/errata/RHSA-2019:2662 https://nvd.nist.gov https://access.redhat.com/errata/RHSA-2019:2651 https://access.redhat.com/security/cve/cve-2019-10357

CVE-2019-10357

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect