Not rated

CVE-2019-1003081 A missing permission check in Jenkins OpenShift Deployer Plugin in the…

Description

A missing permission check in Jenkins OpenShift Deployer Plugin in the DeployApplication.DeployApplicationDescriptor#doCheckLogin form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins OpenShift Deployer Plugin	Versions not published

The 7 CVEs of Jenkins OpenShift Deployer Plugin →

CVE-2022-36909 A missing permission check in Jenkins OpenShift Deployer Plugin 1.2.0 and earlier allows attackers with Overall/Read… Not rated CVE-2022-36908 A cross-site request forgery (CSRF) vulnerability in Jenkins OpenShift Deployer Plugin 1.2.0 and earlier allows… Not rated CVE-2022-36907 A missing permission check in Jenkins OpenShift Deployer Plugin 1.2.0 and earlier allows attackers with Overall/Read… Not rated CVE-2022-36906 A cross-site request forgery (CSRF) vulnerability in Jenkins OpenShift Deployer Plugin 1.2.0 and earlier allows… Not rated

Do you use Jenkins OpenShift Deployer Plugin?

Track this CVE Watch Jenkins OpenShift Deployer Plugin Check my SBOMs

cveye.io/en/cve/CVE-2019-1003081

Timeline

Published April 4, 2019
Last modified August 5, 2024

References

107790 www.securityfocus.com
[oss-security] 20190413 Re: Multiple vulnerabilities in Jenkins plugins www.openwall.com
jenkins.io jenkins.io

Track this CVE

CVE-2019-1003081 A missing permission check in Jenkins OpenShift Deployer Plugin in the…

Description

Affected products and versions

Other CVEs of Jenkins OpenShift Deployer Plugin