CVE-2019-10354
- State
- Published
- Severity
- Not scored
- Published
- Jul 17, 2019
- Updated
- Aug 4, 2024
- Reserved
- Mar 29, 2019
Description
A vulnerability in the Stapler web framework used in Jenkins 2.185 and earlier, LTS 2.176.1 and earlier allowed attackers to access view fragments directly, bypassing permission checks and possibly obtain sensitive information.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
JenkinsJenkins project |
|
References
- [oss-security] 20190717 Multiple vulnerabilities in Jenkinsmailing-list
- 109373vdb-entry
- RHSA-2019:2503vendor-advisory
- RHSA-2019:2548vendor-advisory
- https://jenkins.io/security/advisory/2019-07-17/#SECURITY-534
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.