Lucene search
PRIOn knowledge basePRION:CVE-2019-10322HistoryMay 31, 2019 - 3:29 p.m.
Design/Logic Flaw
2019-05-3115:29:00
PRIOn knowledge base
www.prio-n.com
5
A missing permission check in Jenkins Artifactory Plugin 3.2.2 and earlier in ArtifactoryBuilder.DescriptorImpl#doTestConnection allowed users with Overall/Read access to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
| CPE | Name | Operator | Version |
|---|---|---|---|
| artifactory | le | 3.2.2 |
Related
github
github
Jenkins Artifactory Plugin missing permission check
2022-05-24 22:00:02
cvelist
cvelist
CVE-2019-10322
2019-05-31 14:20:19
cve
cve
CVE-2019-10322
2019-05-31 15:29:00
osv
osv
CVE-2019-10322
2019-05-31 15:29:00
Jenkins Artifactory Plugin missing permission check
2022-05-24 22:00:02
nvd
nvd
CVE-2019-10322
2019-05-31 15:29:00
talos
talos
Jenkins Artifactory Plugin information disclosure vulnerability
2019-06-04 00:00:00