Jenkins
Jenkins Security Advisory 2019-04-17
2019-04-17 Apr 17, 2019 Source: Vendor
Imported by the Jenkins advisory catcher from https://www.jenkins.io/security/advisory/2019-04-17/. 5 SECURITY issues listed. Draft. Review before publishing.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://www.jenkins.io/security/advisory/2019-04-17/
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
4 lines
Showing 1–4 of 4
CVE-2019-10300
BR2019-0000-019438
SECURITY-1357
unclaimed
CSRF vulnerability and missing permission checks in GitLab Plugin allowed capturing credentials
Credited as Peter Adkins of Cisco Umbrella
CVE-2019-10302
BR2019-0000-019439
SECURITY-836
unclaimed
jira-ext Plugin stored credentials in plain text
Credited as Viktor Gazdag
CVE-2019-10303
BR2019-0000-019440
SECURITY-844
unclaimed
Azure PublisherSettings Credentials Plugin stored credentials in plain text
Credited as Viktor Gazdag
CVE-2019-10304
BR2019-0000-019441
SECURITY-983
unclaimed
CSRF vulnerability and missing permission check in XebiaLabs XL Deploy Plugin
Credited as Viktor Gazdag