En resumen
- CVE-2019-1003019 es una vulnerabilidad MEDIO (CVSS 5.9) que afecta a org.jenkins-ci.plugins:github-oauth, github oauth (jenkins).
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.85%, mayor que el 58.5% de las vulnerabilidades.
- Solución: actualizar a 0.31 o posterior.
Description
An session fixation vulnerability exists in Jenkins GitHub Authentication Plugin 0.29 and earlier in GithubSecurityRealm.java that allows unauthorized attackers to impersonate another user if they can control the pre-authentication session.
NVD description
An session fixation vulnerability exists in Jenkins GitHub Authentication Plugin 0.29 and earlier in GithubSecurityRealm.java that allows unauthorized attackers to impersonate another user if they can control the pre-authentication session.
Más vulnerabilidades de org.jenkins-ci.plugins:github-oauth
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free