Lucene search
Redhat.comRH:CVE-2019-10384HistoryAug 30, 2019 - 5:28 a.m.
CVE-2019-10384
2019-08-3005:28:32
redhat.com
access.redhat.com
9
EPSS
0.002
Percentile
59.5%
A flaw was found in Jenkins. Users are allowed to obtain CSRF tokens without an associated web session ID, resulting in CSRF tokens that did not expire and could be used to bypass CSRF protection for the anonymous user. The highest threat from this vulnerability is to data confidentiality and integrity.
Related
osv
osv
Cross-Site Request Forgery in Jenkins
2022-05-24 16:55:01
CVE-2019-10384
2019-08-28 16:15:10
nvd
nvd
CVE-2019-10384
2019-08-28 16:15:10
cvelist
cvelist
CVE-2019-10384
2019-08-28 15:30:17
cve
cve
CVE-2019-10384
2019-08-28 16:15:10
prion
prion
Cross site request forgery (csrf)
2019-08-28 16:15:00
veracode
veracode
Cross-site Request Forgery (CSRF)
2019-09-21 00:17:23
github
github
Cross-Site Request Forgery in Jenkins
2022-05-24 16:55:01
nessus
nessus
RHEL 7 : OpenShift Container Platform 3.11 jenkins (RHSA-2019:3144)
2019-10-18 00:00:00
Jenkins < 2.176.3 LTS / 2.192 Multiple Vulnerabilities
2019-10-10 00:00:00
RHEL 7 : OpenShift Container Platform 4.1.16 jenkins (RHSA-2019:2789)
2019-09-23 00:00:00
freebsd
freebsd
jenkins -- multiple vulnerabilities
2019-08-28 00:00:00
archlinux
archlinux
[ASA-201908-22] jenkins: multiple issues
2019-08-30 00:00:00
redhat
redhat
openvas
openvas
Jenkins < 2.192 and < 2.176.3 LTS Multiple Vulnerabilities - Linux
2019-08-30 00:00:00
Jenkins < 2.192 and < 2.176.3 LTS Multiple Vulnerabilities - Windows
2019-08-30 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - April 2022
2022-04-19 00:00:00