Lucene search
GoogleOSV:GHSA-6JFC-MC97-C7WGHistoryMay 24, 2022 - 4:50 p.m.
Missing Authorization in Jenkins
2022-05-2416:50:30
Google
osv.dev
12
0.003 Low
EPSS
Percentile
68.1%
A vulnerability in the Stapler web framework used in Jenkins 2.185 and earlier, LTS 2.176.1 and earlier allowed attackers to access view fragments directly, bypassing permission checks and possibly obtain sensitive information.
References
www.openwall.com/lists/oss-security/2019/07/17/2
access.redhat.com/errata/RHSA-2019:2503
access.redhat.com/errata/RHSA-2019:2548
github.com/jenkinsci/jenkins/commit/279d8109eddb7a494428baf25af9756c2e33576b
github.com/jenkinsci/stapler/commit/19637555a9f32d3875356b47234131d8b1e9fee4
jenkins.io/security/advisory/2019-07-17/#SECURITY-534
nvd.nist.gov/vuln/detail/CVE-2019-10354
Related
cve
cve
CVE-2019-10354
2019-07-17 16:15:12
osv
osv
CVE-2019-10354
2019-07-17 16:15:12
github
github
Missing Authorization in Jenkins
2022-05-24 16:50:30
prion
prion
Information disclosure
2019-07-17 16:15:00
nvd
nvd
CVE-2019-10354
2019-07-17 16:15:12
redhatcve
redhatcve
CVE-2019-10354
2019-07-17 19:21:33
cvelist
cvelist
CVE-2019-10354
2019-07-17 15:45:13
veracode
veracode
Improper Access Control
2019-07-19 02:34:18
openvas
openvas
Jenkins < 2.186 and < 2.176.2 LTS Multiple Vulnerabilities - Windows
2019-07-31 00:00:00
Jenkins < 2.186 and < 2.176.2 LTS Multiple Vulnerabilities - Linux
2019-07-31 00:00:00
redhat
redhat
freebsd
freebsd
jenkins -- multiple vulnerabilities
2019-07-17 00:00:00
nessus
nessus
RHEL 7 : OpenShift Container Platform 4.1 jenkins (RHSA-2019:2548)
2019-08-30 00:00:00
Jenkins < 2.176.2 LTS / 2.186 Multiple Vulnerabilities
2019-07-26 00:00:00
RHEL 7 : OpenShift Container Platform 3.11 jenkins (RHSA-2019:2503)
2019-08-20 00:00:00