Lucene search
+L

5 matches found

Mend
Mend
•added 2019/04/04 3:38 p.m.•2 views

CVE-2019-1003099

A missing permission check in Jenkins openid Plugin in the OpenIdSsoSecurityRealm.DescriptorImpldoValidate form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server...

7.1CVSS0.01521EPSS
SaveExploits0References6
Mend
Mend
•added 2019/04/04 3:38 p.m.•2 views

CVE-2019-1003098

A cross-site request forgery vulnerability in Jenkins openid Plugin in the OpenIdSsoSecurityRealm.DescriptorImpldoValidate form validation method allows attackers to initiate a connection to an attacker-specified server...

7.1CVSS0.01312EPSS
SaveExploits0References6
AlpineLinux
AlpineLinux
•added 2019/04/04 3:38 p.m.•45 views

CVE-2019-1003098

A cross-site request forgery vulnerability in Jenkins openid Plugin in the OpenIdSsoSecurityRealm.DescriptorImpldoValidate form validation method allows attackers to initiate a connection to an attacker-specified server...

6.5CVSS5AI score0.01312EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/04/04 12:00 a.m.•9 views

CVE-2019-1003099: Missing Authorization

A missing permission check in Jenkins openid Plugin in the OpenIdSsoSecurityRealm.DescriptorImpldoValidate form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server...

6.5CVSS5.8AI score0.01521EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/04/04 12:00 a.m.•5 views

CVE-2019-1003098: Cross-Site Request Forgery (CSRF)

A cross-site request forgery vulnerability in Jenkins openid Plugin in the OpenIdSsoSecurityRealm.DescriptorImpldoValidate form validation method allows attackers to initiate a connection to an attacker-specified server...

6.5CVSS5.8AI score0.01312EPSS
SaveExploits0References2
Rows per page
Query Builder