CVE-2019-10465

2019-10-2313:15:10

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.7%

JSON

A missing permission check in Jenkins Deploy WebLogic Plugin allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials, or determine whether a file or directory with an attacker-specified path exists on the Jenkins master file system.

CPENameOperatorVersion
weblogic-deployer-plugineqweblogic-deployer-plugin-2.8
weblogic-deployer-plugineqweblogic-deployer-plugin-2.10
weblogic-deployer-plugineqweblogic-deployer-plugin-3.1
weblogic-deployer-plugineqweblogic-deployer-plugin-2.4
weblogic-deployer-plugineqweblogic-deployer-plugin-3.3
weblogic-deployer-plugineqweblogic-deployer-plugin-2.0
weblogic-deployer-plugineqweblogic-deployer-plugin-3.0
weblogic-deployer-plugineqweblogic-deployer-plugin-2.9
weblogic-deployer-plugineqweblogic-deployer-plugin-2.6
weblogic-deployer-plugineqweblogic-deployer-plugin-4.1

Name	Operator	Version
weblogic-deployer-plugin	eq	weblogic-deployer-plugin-2.8
weblogic-deployer-plugin	eq	weblogic-deployer-plugin-2.10
weblogic-deployer-plugin	eq	weblogic-deployer-plugin-3.1
weblogic-deployer-plugin	eq	weblogic-deployer-plugin-2.4
weblogic-deployer-plugin	eq	weblogic-deployer-plugin-3.3
weblogic-deployer-plugin	eq	weblogic-deployer-plugin-2.0
weblogic-deployer-plugin	eq	weblogic-deployer-plugin-3.0
weblogic-deployer-plugin	eq	weblogic-deployer-plugin-2.9
weblogic-deployer-plugin	eq	weblogic-deployer-plugin-2.6
weblogic-deployer-plugin	eq	weblogic-deployer-plugin-4.1