Lucene search

K
osvGoogleOSV:CVE-2019-16574
HistoryDec 17, 2019 - 3:15 p.m.

CVE-2019-16574

2019-12-1715:15:24
Google
osv.dev
4

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

28.4%

A missing permission check in Jenkins Alauda DevOps Pipeline Plugin 2.3.2 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

28.4%

Related for OSV:CVE-2019-16574