CVE-2019-10319

MEDIUM 4.3CVE-2019-10319 · Published 21/05/2019 · updated 17/06/2026

In short

CVE-2019-10319 is a MEDIUM (CVSS 4.3) vulnerability affecting pluggable authentication module (jenkins).
Chance of exploitation in the next 30 days (EPSS): 0.77%, higher than 55.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
pluggable authentication module jenkins	`= 1.0= 1.1= 1.2= 1.3= 1.4= 1.5`	No fix yet

Description

A missing permission check in Jenkins PAM Authentication Plugin 1.5 and earlier, except 1.4.1 in PamSecurityRealm.DescriptorImpl#doTest allowed users with Overall/Read permission to obtain limited information about the file /etc/shadow and the user Jenkins is running as.

References

openwall.com/lists/oss-security/2019/05/21/1 · Mailing List
jenkins.io/security/advisory/2019-05-21 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free