Jenkins
Jenkins Security Advisory 2019-05-31
2019-05-31 May 31, 2019 Source: Vendor
Imported by the Jenkins advisory catcher from https://www.jenkins.io/security/advisory/2019-05-31/. 7 SECURITY issues listed. Draft. Review before publishing.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://www.jenkins.io/security/advisory/2019-05-31/
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
9 lines
Showing 1–9 of 9
CVE-2019-10326
BR2019-0000-019417
SECURITY-1391
unclaimed
CSRF vulnerability in Warnings Plugin
Credited as Daniel Beck, CloudBees, Inc.
CVE-2019-10328
BR2019-0000-019418
SECURITY-921
unclaimed
Unsafe entry in Script Security list of approved signatures in Pipeline Remote Loader Plugin
Credited as Jesse Glick, CloudBees, Inc.
CVE-2019-10327
BR2019-0000-019419
SECURITY-1409
unclaimed
XML External Entity processing vulnerability in Pipeline Maven Integration Plugin
Credited as Kurt Boberg, DocuSign Inc.
CVE-2019-10324
BR2019-0000-019420
SECURITY-1347
unclaimed
CSRF vulnerability in Artifactory Plugin
Credited as Oleg Naneshev
CVE-2019-10324
BR2019-0000-019421
SECURITY-1347
unclaimed
CSRF vulnerability in Artifactory Plugin
Credited as Fred Blaise, CloudBees, Inc.
Acknowledgement
BR2019-0000-019422
SECURITY-1015
unclaimed
SECURITY-1015
Credited as Oleg Nenashev, CloudBees, Inc.
Acknowledgement
BR2019-0000-019423
SECURITY-1015
unclaimed
SECURITY-1015
Credited as Peter Adkins of Cisco Umbrella
CVE-2019-10329
BR2019-0000-019424
SECURITY-1403
unclaimed
InfluxDB Plugin stored credentials in plain text
Credited as René Scheibe
CVE-2019-10325
BR2019-0000-019425
SECURITY-1373
unclaimed
Persisted XSS vulnerability in Warnings Plugin
Credited as Wadeck Follonier, CloudBees, Inc.