Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2019-10470

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-7jf5-p556-75pr

Jenkins Kubernetes CI/CD Plugin vulnerable to Credential Enumeration A missing permission check in Jenkins ElasticBox Jenkins Kubernetes CI/CD Plugin in form-related methods allowed users with Overall/Read access to enumerate credentials ID of credentials stored in Jenkins. ## Note: Jenkins has suspended distribution of this plugin.

gitlab/maven/com.elasticbox.jenkins-ci.plugins/kubernetes-ci/CVE-2019-10470

Incorrect Default Permissions A missing permission check in Jenkins ElasticBox Jenkins Kubernetes CI/CD Plugin in form-related methods allowed users with Overall/Read access to enumerate credentials ID of credentials stored in Jenkins.

gitlab/maven/org.jenkins-ci.plugins/kubernetes-ci/CVE-2019-10470

Incorrect Default Permissions A missing permission check in Jenkins ElasticBox Jenkins Kubernetes CI/CD Plugin in form-related methods allows users with Overall/Read access to enumerate credentials ID of credentials stored in Jenkins.