CVE-2019-1003019

Summary: CVE-2019-1003019 affects the Jenkins GitHub Authentication Plugin (versions ≤ 0.29). The vulnerability lies in GithubSecurityRealm.java, enabling an attacker who can control the pre-authentication session to impersonate another user (session fixation). Affected software: Jenkins GitHub A...