Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
freebsdFreeBSDDF3DB21D-1A4D-4C78-ACF7-4639E5A795E0
HistoryJul 17, 2019 - 12:00 a.m.

jenkins -- multiple vulnerabilities

2019-07-1700:00:00
vuxml.freebsd.org
185

5.1 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

0.528 Medium

EPSS

Percentile

97.6%

JSON

Jenkins Security Advisory:

Description
(Medium) SECURITY-1424 / CVE-2019-10352
Arbitrary file write vulnerability using file parameter definitions
(High) SECURITY-626 / CVE-2019-10353
CSRF protection tokens did not expire
(Medium) SECURITY-534 / CVE-2019-10354
Unauthorized view fragment access

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchjenkins< 2.186UNKNOWN
FreeBSDanynoarchjenkins-lts< 2.176.2UNKNOWN

Related

openvas 2
nessus 4
redhat 2
github 3
osv 6
cve 3
nvd 3
cvelist 3
prion 3
redhatcve 3
veracode 3
checkpoint_advisories 1
openvas
openvas
Jenkins < 2.186 and < 2.176.2 LTS Multiple Vulnerabilities - Windows
2019-07-31 00:00:00
Jenkins < 2.186 and < 2.176.2 LTS Multiple Vulnerabilities - Linux
2019-07-31 00:00:00
nessus
nessus
RHEL 7 : OpenShift Container Platform 4.1 jenkins (RHSA-2019:2548)
2019-08-30 00:00:00
Jenkins < 2.176.2 LTS / 2.186 Multiple Vulnerabilities
2019-07-26 00:00:00
RHEL 7 : OpenShift Container Platform 3.11 jenkins (RHSA-2019:2503)
2019-08-20 00:00:00
redhat
redhat
(RHSA-2019:2503) Important: OpenShift Container Platform 3.11 jenkins security update
2019-08-15 13:19:41
(RHSA-2019:2548) Important: OpenShift Container Platform 4.1 jenkins security update
2019-08-28 16:57:18
github
github
Missing Authorization in Jenkins
2022-05-24 16:50:30
Cross-Site Request Forgery in Jenkins
2022-05-24 16:50:30
Improper Limitation of a Pathname to a Restricted Directory in Jenkins
2022-05-24 16:50:30
osv
osv
CVE-2019-10354
2019-07-17 16:15:12
Cross-Site Request Forgery in Jenkins
2022-05-24 16:50:30
Missing Authorization in Jenkins
2022-05-24 16:50:30
cve
cve
CVE-2019-10354
2019-07-17 16:15:12
CVE-2019-10353
2019-07-17 16:15:12
CVE-2019-10352
2019-07-17 16:15:12
nvd
nvd
CVE-2019-10353
2019-07-17 16:15:12
CVE-2019-10354
2019-07-17 16:15:12
CVE-2019-10352
2019-07-17 16:15:12
cvelist
cvelist
CVE-2019-10353
2019-07-17 15:45:13
CVE-2019-10354
2019-07-17 15:45:13
CVE-2019-10352
2019-07-17 15:45:13
prion
prion
Information disclosure
2019-07-17 16:15:00
Cross site request forgery (csrf)
2019-07-17 16:15:00
Path traversal
2019-07-17 16:15:00
redhatcve
redhatcve
CVE-2019-10354
2019-07-17 19:21:33
CVE-2019-10352
2020-03-18 05:12:44
CVE-2019-10353
2019-07-17 19:52:05
veracode
veracode
Cross-Site Request Forgery (CSRF)
2019-08-16 00:17:48
Directory Traversal
2019-08-16 00:17:47
Improper Access Control
2019-07-19 02:34:18
checkpoint_advisories
checkpoint_advisories
Jenkins Core Directory Traversal (CVE-2019-10352)
2020-02-25 00:00:00

5.1 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

0.528 Medium

EPSS

Percentile

97.6%

JSON
Related for DF3DB21D-1A4D-4C78-ACF7-4639E5A795E0
openvas2nessus4redhat2github3osv6cve3nvd3cvelist3prion3redhatcve3veracode3checkpoint_advisories1