CVE-2019-10457

CVE-2019-10457 : The Jenkins Oracle Cloud Infrastructure Compute Classic Plugin has a missing permission check that allows attackers with Overall/Read to trigger connections to an attacker-specified URL using attacker-specified credentials. Affected component: Jenkins plugin for Oracle Cloud Infr...

CVE-2019-10456

CVE-2019-10456 is a CSRF vulnerability in the Jenkins Oracle Cloud Infrastructure Compute Classic Plugin. The issue arises because a method implementing form validation lacks proper permission checks, allowing users with Overall/Read access to initiate a connection test to an attacker‑specified U...