Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Jenkins Subscribe
Filtered by product Jx Resources
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-10339 1 Jenkins 1 Jx Resources 2020-10-01 4.0 MEDIUM 8.8 HIGH
A missing permission check in Jenkins JX Resources Plugin 1.0.36 and earlier in GlobalPluginConfiguration#doValidateClient allowed users with Overall/Read access to have Jenkins connect to an attacker-specified Kubernetes server, potentially leaking credentials.
CVE-2019-10338 1 Jenkins 1 Jx Resources 2019-06-13 6.8 MEDIUM 8.8 HIGH
A cross-site request forgery vulnerability in Jenkins JX Resources Plugin 1.0.36 and earlier in GlobalPluginConfiguration#doValidateClient allowed attackers to have Jenkins connect to an attacker-specified Kubernetes server, potentially leaking credentials.