CVE-2019-10281

The CVE-2019-10281 issue affects the Jenkins Relution Enterprise Appstore Publisher Plugin, where credentials are stored unencrypted in the plugin’s global configuration file on the Jenkins master. The credential data can be viewed by anyone with access to the master/controller filesystem; the ri...

CVE-2019-10388

The CVE-2019-10388 issue affects Jenkins Relution Enterprise Appstore Publisher Plugin (versions 1.24 and earlier). It is a cross-site request forgery (CSRF) vulnerability that could allow an attacker to cause Jenkins to initiate an HTTP connection to an attacker-controlled server. Impact is desc...

CVE-2019-10389

The CVE-2019-10389 entry concerns Jenkins Relution Enterprise Appstore Publisher Plugin, affected in versions 1.24 and earlier. The root cause described across connected documents is a missing permission check that allows an attacker to trigger Jenkins to initiate an HTTP connection to an attacke...