CVE-2019-1003081

A missing permission check in Jenkins OpenShift Deployer Plugin in the DeployApplication.DeployApplicationDescriptor#doCheckLogin form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server.
References
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:jenkins:openshift_deployer:*:*:*:*:*:jenkins:*:*

Information

Published : 2019-04-04 09:29

Updated : 2020-07-15 06:50


NVD link : CVE-2019-1003081

Mitre link : CVE-2019-1003081


JSON object : View

CWE
CWE-862

Missing Authorization

Advertisement

dedicated server usa

Products Affected

jenkins

  • openshift_deployer