Websphere Deployer Security Vulnerabilities and Issues — Websphere Deployer CVE List

Lucene search

JenkinsWebsphere Deployer

3 matches found

CVE•added 2019/12/17 3:15 p.m.•41 views

CVE-2019-16559

A missing permission check in Jenkins WebSphere Deployer Plugin 1.6.1 and earlier allows attackers with Overall/Read permission to perform connection tests and determine whether files with an attacker-specified path exist on the Jenkins master file system.

5.5CVSS5.3AI score0.00031EPSS

CVE•added 2019/12/17 3:15 p.m.•40 views

CVE-2019-16561

Jenkins WebSphere Deployer Plugin 1.6.1 and earlier allows users with Overall/Read access to disable SSL/TLS certificate and hostname validation for the entire Jenkins master JVM.

7.1CVSS6.8AI score0.00026EPSS

CVE•added 2019/12/17 3:15 p.m.•39 views

CVE-2019-16560

A cross-site request forgery vulnerability in Jenkins WebSphere Deployer Plugin 1.6.1 and earlier allows attackers to perform connection tests and determine whether files with an attacker-specified path exist on the Jenkins master file system.

8.8CVSS8.6AI score0.0011EPSS