A missing permission check in Jenkins ElectricFlow Plugin 1.1.5 and earlier in Configuration#doTestConnection allowed users with Overall/Read access to connect to an attacker-specified URL using attacker-specified credentials.
Metrics
Affected Vendors & Products
References
History
No history.

Status: PUBLISHED
Assigner: jenkins
Published: 2019-06-11T13:15:26
Updated: 2024-08-04T22:17:20.419Z
Reserved: 2019-03-29T00:00:00
Link: CVE-2019-10332

No data.

Status : Modified
Published: 2019-06-11T14:29:00.853
Modified: 2024-11-21T04:18:54.537
Link: CVE-2019-10332

No data.