Lucene search
+L

3 matches found

Mend
Mend
•added 2019/04/30 12:25 p.m.•2 views

CVE-2019-10310

A cross-site request forgery vulnerability in Jenkins Ansible Tower Plugin 0.9.1 and earlier in the TowerInstallation.TowerInstallationDescriptordoTestTowerConnection form validation method allowed attackers permission to connect to an attacker-specified URL using attacker-specified credentials I...

8.8CVSS0.01525EPSS
SaveExploits0References7
Mend
Mend
•added 2019/04/30 12:25 p.m.•2 views

CVE-2019-10311

A missing permission check in Jenkins Ansible Tower Plugin 0.9.1 and earlier in the TowerInstallation.TowerInstallationDescriptordoTestTowerConnection form validation method allowed attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials...

8.8CVSS0.01798EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/04/30 12:00 a.m.•5 views

CVE-2019-10311: Missing Authorization

A missing permission check in Jenkins Ansible Tower Plugin 0.9.1 and earlier in the TowerInstallation.TowerInstallationDescriptordoTestTowerConnection form validation method allowed attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials...

8.8CVSS5.8AI score0.01798EPSS
SaveExploits0References2
Rows per page
Query Builder