Lucene search
Veracode Vulnerability DatabaseVERACODE:8135HistoryJan 10, 2019 - 2:20 a.m.
Authorization Bypass
2019-01-1002:20:15
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
0.001 Low
EPSS
Percentile
22.0%
Jenkins crowd2 plugin is vulnerable to authorization bypass. A lack of authorization check in CrowdSecurityRealm.java allows an attacker to perform a connection test to a malicious server.
| CPE | Name | Operator | Version |
|---|---|---|---|
| crowd 2 integration | le | 1.5-h-3 | |
| crowd 2 integration | le | 1.5 |
Related
github
github
Jenkins Crowd 2 Integration Plugin server-side request forgery vulnerability
2022-05-14 01:38:17
osv
osv
Jenkins Crowd 2 Integration Plugin server-side request forgery vulnerability
2022-05-14 01:38:17
cvelist
cvelist
CVE-2018-1000422
2019-01-09 23:00:00
cve
cve
CVE-2018-1000422
2019-01-09 23:29:02
prion
prion
Authorization
2019-01-09 23:29:00
nvd
nvd
CVE-2018-1000422
2019-01-09 23:29:02