Lucene search

K

Jenkins Dynatrace Application Monitoring Plugin Security Vulnerabilities

cve
cve

CVE-2019-10462

A cross-site request forgery vulnerability in Jenkins Dynatrace Application Monitoring Plugin 2.1.3 and earlier allowed attackers to connect to an attacker-specified URL using attacker-specified...

8.1CVSS

7.9AI Score

0.001EPSS

2019-10-23 01:15 PM
42
cve
cve

CVE-2019-10461

Jenkins Dynatrace Application Monitoring Plugin 2.1.3 and earlier stored credentials unencrypted in its global configuration file on the Jenkins master where they could be viewed by users with access to the master file...

7.8CVSS

7.5AI Score

0.0004EPSS

2019-10-23 01:15 PM
45
cve
cve

CVE-2019-10463

A missing permission check in Jenkins Dynatrace Application Monitoring Plugin allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified...

6.5CVSS

6.3AI Score

0.001EPSS

2019-10-23 01:15 PM
37