Lucene search
+L

8 matches found

Mend
Mend
•added 2019/04/04 3:38 p.m.•3 views

CVE-2019-1003091

A missing permission check in Jenkins SOASTA CloudTest Plugin in the CloudTestServer.DescriptorImpldoValidate form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server...

7.1CVSS0.01459EPSS
SaveExploits0References4
Mend
Mend
•added 2019/04/04 3:38 p.m.•3 views

CVE-2019-1003099

A missing permission check in Jenkins openid Plugin in the OpenIdSsoSecurityRealm.DescriptorImpldoValidate form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server...

7.1CVSS0.01521EPSS
SaveExploits0References6
Mend
Mend
•added 2019/04/04 3:38 p.m.•4 views

CVE-2019-1003090

A cross-site request forgery vulnerability in Jenkins SOASTA CloudTest Plugin in the CloudTestServer.DescriptorImpldoValidate form validation method allows attackers to initiate a connection to an attacker-specified server...

7.1CVSS0.01296EPSS
SaveExploits0References4
Mend
Mend
•added 2019/04/04 3:38 p.m.•4 views

CVE-2019-1003098

A cross-site request forgery vulnerability in Jenkins openid Plugin in the OpenIdSsoSecurityRealm.DescriptorImpldoValidate form validation method allows attackers to initiate a connection to an attacker-specified server...

7.1CVSS0.01312EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/04/04 12:00 a.m.•10 views

CVE-2019-1003099: Missing Authorization

A missing permission check in Jenkins openid Plugin in the OpenIdSsoSecurityRealm.DescriptorImpldoValidate form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server...

6.5CVSS5.8AI score0.01521EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/04/04 12:00 a.m.•5 views

CVE-2019-1003098: Cross-Site Request Forgery (CSRF)

A cross-site request forgery vulnerability in Jenkins openid Plugin in the OpenIdSsoSecurityRealm.DescriptorImpldoValidate form validation method allows attackers to initiate a connection to an attacker-specified server...

6.5CVSS5.8AI score0.01312EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/04/04 12:00 a.m.•8 views

CVE-2019-1003090: Cross-Site Request Forgery (CSRF)

A cross-site request forgery vulnerability in Jenkins SOASTA CloudTest Plugin in the CloudTestServer.DescriptorImpldoValidate form validation method allows attackers to initiate a connection to an attacker-specified server...

6.5CVSS5.7AI score0.01296EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/04/04 12:00 a.m.•6 views

CVE-2019-1003091: Missing Authorization

A missing permission check in Jenkins SOASTA CloudTest Plugin in the CloudTestServer.DescriptorImpldoValidate form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server...

6.5CVSS5.8AI score0.01459EPSS
SaveExploits0References2
Rows per page
Query Builder