CVE-2019-10463

2019-10-2313:15:10

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.6%

JSON

A missing permission check in Jenkins Dynatrace Application Monitoring Plugin allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials.

CPENameOperatorVersion
dynatrace-plugineqdynatrace-dashboard-2.0.5
dynatrace-plugineqdynatrace-dashboard-2.1.0
dynatrace-plugineqdynatrace-dashboard-2.0.7
dynatrace-plugineqdynatrace-dashboard-2.1.3
dynatrace-plugineqdynatrace-dashboard-2.0.4
dynatrace-plugineqdynatrace-dashboard-2.1.4
dynatrace-plugineqdynatrace-dashboard-1.0.10

Name	Operator	Version
dynatrace-plugin	eq	dynatrace-dashboard-2.0.5
dynatrace-plugin	eq	dynatrace-dashboard-2.1.0
dynatrace-plugin	eq	dynatrace-dashboard-2.0.7
dynatrace-plugin	eq	dynatrace-dashboard-2.1.3
dynatrace-plugin	eq	dynatrace-dashboard-2.0.4
dynatrace-plugin	eq	dynatrace-dashboard-2.1.4
dynatrace-plugin	eq	dynatrace-dashboard-1.0.10