Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2019-10469

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-hch9-6qrj-5f49

Jenkins Kubernetes CI/CD Plugin vulnerable to Improper Authorization A missing permission check in Jenkins ElasticBox Jenkins Kubernetes CI/CD Plugin allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins. ## Note: Jenkins has suspended distribution of this plugin.

gitlab/maven/com.elasticbox.jenkins-ci.plugins/kubernetes-ci/CVE-2019-10469

Incorrect Default Permissions A missing permission check in Jenkins ElasticBox Jenkins Kubernetes CI/CD Plugin allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.

gitlab/maven/org.jenkins-ci.plugins/kubernetes-ci/CVE-2019-10469

Incorrect Default Permissions A missing permission check in Jenkins ElasticBox Jenkins Kubernetes CI/CD Plugin allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.