[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

247085

 
 

909

 
 

194218

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

Privilege escalation vulnerability in Jenkins - CVE-2019-1003049 (dpkg)

ID: oval:org.secpod.oval:def:55922Date: (C)2019-07-04   (M)2023-12-02
Class: VULNERABILITYFamily: unix




The host is installed with Jenkins LTS through 2.164.1 or Jenkins rolling release through 2.171 and is prone to a privilege escalation vulnerability. The flaw is present in the application, which fails to properly handle remoting-based CLI authentication caches. Successful exploitation could allow attackers to cause unauthorized modifications.

Platform:
Linux
Product:
Jenkins LTS
Jenkins rolling release
Reference:
CVE-2019-1003049
CVE    1
CVE-2019-1003049
CPE    4
cpe:/a:jenkins:jenkins:2.171
cpe:/a:jenkins:jenkins:2.164.1::~~lts~~~
cpe:/a:jenkins:jenkins:::~~lts~~~
cpe:/a:jenkins:jenkins:::~~-~~~
...

© SecPod Technologies