Lucene search
Veracode Vulnerability DatabaseVERACODE:20861HistoryJul 19, 2019 - 2:34 a.m.
Improper Access Control
2019-07-1902:34:18
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.003 Low
EPSS
Percentile
68.1%
stapler web framework is vulnerable to Improper Access Control. The UI views are frequently comprised of several view fragments, enabling plugins to extend existing views with more content. This vulnerability allows an attacker to directly access a view fragment containing sensitive information, bypassing any permission checks in the corresponding view.
References
www.openwall.com/lists/oss-security/2019/07/17/2
www.securityfocus.com/bid/109373
access.redhat.com/errata/RHSA-2019:2503
access.redhat.com/errata/RHSA-2019:2548
github.com/stapler/stapler/commit/19637555a9f32d3875356b47234131d8b1e9fee4
github.com/stapler/stapler/pull/166
jenkins.io/security/advisory/2019-07-17/#SECURITY-534
Related
cve
cve
CVE-2019-10354
2019-07-17 16:15:12
osv
osv
CVE-2019-10354
2019-07-17 16:15:12
Missing Authorization in Jenkins
2022-05-24 16:50:30
github
github
Missing Authorization in Jenkins
2022-05-24 16:50:30
prion
prion
Information disclosure
2019-07-17 16:15:00
nvd
nvd
CVE-2019-10354
2019-07-17 16:15:12
redhatcve
redhatcve
CVE-2019-10354
2019-07-17 19:21:33
cvelist
cvelist
CVE-2019-10354
2019-07-17 15:45:13
openvas
openvas
Jenkins < 2.186 and < 2.176.2 LTS Multiple Vulnerabilities - Windows
2019-07-31 00:00:00
Jenkins < 2.186 and < 2.176.2 LTS Multiple Vulnerabilities - Linux
2019-07-31 00:00:00
nessus
nessus
RHEL 7 : OpenShift Container Platform 3.11 jenkins (RHSA-2019:2503)
2019-08-20 00:00:00
RHEL 7 : OpenShift Container Platform 4.1 jenkins (RHSA-2019:2548)
2019-08-30 00:00:00
Jenkins < 2.176.2 LTS / 2.186 Multiple Vulnerabilities
2019-07-26 00:00:00
redhat
redhat
freebsd
freebsd
jenkins -- multiple vulnerabilities
2019-07-17 00:00:00