CVE-2019-1003049

State: Published
Severity: Not scored
Published: Apr 10, 2019
Updated: Aug 5, 2024
Reserved: Apr 10, 2019

Description

Users who cached their CLI authentication before Jenkins was updated to 2.150.2 and newer, or 2.160 and newer, would remain authenticated in Jenkins 2.171 and earlier and Jenkins LTS 2.164.1 and earlier, because the fix for CVE-2019-1003004 in these releases did not reject existing remoting-based CLI authentication caches.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
JenkinsJenkins project	2.171 and earlier, LTS 2.164.1 and earlierAffected

References

107901vdb-entry
RHBA-2019:1605vendor-advisory
https://www.oracle.com/security-alerts/cpuapr2022.html
https://jenkins.io/security/advisory/2019-04-10/#SECURITY-1289

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.