Lucene search
GoogleOSV:GHSA-9X5V-8352-244GHistoryMay 24, 2022 - 4:51 p.m.
Missing Authorization in Jenkins Pipeline: Shared Groovy Libraries Plugin
2022-05-2416:51:50
Google
osv.dev
5
0.001 Low
EPSS
Percentile
45.8%
A missing permission check in Jenkins Pipeline: Shared Groovy Libraries Plugin 2.14 and earlier allowed users with Overall/Read access to obtain limited information about the content of SCM repositories referenced by global libraries.
References
www.openwall.com/lists/oss-security/2019/07/31/1
access.redhat.com/errata/RHSA-2019:2594
access.redhat.com/errata/RHSA-2019:2651
access.redhat.com/errata/RHSA-2019:2662
github.com/jenkinsci/workflow-cps-global-lib-plugin
github.com/jenkinsci/workflow-cps-global-lib-plugin/commit/6fce1e241d82641e8648c546bc63c22a5e07e96b
jenkins.io/security/advisory/2019-07-31/#SECURITY1422
nvd.nist.gov/vuln/detail/CVE-2019-10357
Related
osv
osv
CVE-2019-10357
2019-07-31 13:15:12
redhatcve
redhatcve
CVE-2019-10357
2019-10-05 09:39:08
nvd
nvd
CVE-2019-10357
2019-07-31 13:15:12
github
github
Missing Authorization in Jenkins Pipeline: Shared Groovy Libraries Plugin
2022-05-24 16:51:50
veracode
veracode
Information Disclosure
2019-09-05 00:17:06
cve
cve
CVE-2019-10357
2019-07-31 13:15:12
prion
prion
Design/Logic Flaw
2019-07-31 13:15:00
cvelist
cvelist
CVE-2019-10357
2019-07-31 12:45:21
nessus
nessus
