Filtered by vendor Jenkins
Subscriptions
Filtered by product Jx Resources
Subscriptions
Total
2 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2019-10339 | 1 Jenkins | 1 Jx Resources | 2024-11-21 | 8.8 High |
| A missing permission check in Jenkins JX Resources Plugin 1.0.36 and earlier in GlobalPluginConfiguration#doValidateClient allowed users with Overall/Read access to have Jenkins connect to an attacker-specified Kubernetes server, potentially leaking credentials. | ||||
| CVE-2019-10338 | 1 Jenkins | 1 Jx Resources | 2024-11-21 | N/A |
| A cross-site request forgery vulnerability in Jenkins JX Resources Plugin 1.0.36 and earlier in GlobalPluginConfiguration#doValidateClient allowed attackers to have Jenkins connect to an attacker-specified Kubernetes server, potentially leaking credentials. | ||||
Page 1 of 1.