CVE-2019-17579

Description

References

• SonarSource/sonarqube commit 2beaf73 · Patch

sonarqube의 다른 취약점

• CVE-2024-47911높음 7.2In SonarSource SonarQube 10.4 through 10.5 before 10.6, a vulnerability was discovered in the authorizations/group-memberships API endpoint …
• CVE-2024-38460보통 6.5In SonarQube before 10.4 and 9.9.4 LTA, encrypted values generated using the Settings Encryption feature are potentially exposed in cleartex…
• CVE-2020-28002보통 5.3In SonarQube 8.4.2.36762, an external attacker can achieve authentication bypass through SonarScanner. With an empty value for the -D sonar.…
• CVE-2020-27986높음 7.5SonarQube 8.4.2.36762 allows remote attackers to discover cleartext SMTP, SVN, and GitLab credentials via the api/settings/values URI. NOTE:…
• CVE-2018-19413보통 4.3A vulnerability in the API of SonarSource SonarQube before 7.4 could allow an authenticated user to discover sensitive information such as v…