Lucene search

K
osvGoogleOSV:CVE-2019-1003087
HistoryApr 04, 2019 - 4:29 p.m.

CVE-2019-1003087

2019-04-0416:29:01
Google
osv.dev
4

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.0%

A missing permission check in Jenkins Chef Sinatra Plugin in the ChefBuilderConfiguration.DescriptorImpl#doTestConnection form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server.

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.0%

Related for OSV:CVE-2019-1003087