CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-10308

A missing permission check in Jenkins Static Analysis Utilities Plugin 1.95 and earlier in the DefaultGraphConfigurationView#doSave form handler method allowed attackers with Overall/Read permission to change the per-job default graph configuration for all users.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 25.5%

CVSS Severity

CVSS v3 Score 6.5

CVSS v2 Score 4.0

References

Products affected by CVE-2019-10308

Jenkins » Static Analysis Utilities » Version: 1.0

cpe:2.3:a:jenkins:static_analysis_utilities:1.0
Jenkins » Static Analysis Utilities » Version: 1.1

cpe:2.3:a:jenkins:static_analysis_utilities:1.1
Jenkins » Static Analysis Utilities » Version: 1.10

cpe:2.3:a:jenkins:static_analysis_utilities:1.10
Jenkins » Static Analysis Utilities » Version: 1.11

cpe:2.3:a:jenkins:static_analysis_utilities:1.11
Jenkins » Static Analysis Utilities » Version: 1.12

cpe:2.3:a:jenkins:static_analysis_utilities:1.12
Jenkins » Static Analysis Utilities » Version: 1.13

cpe:2.3:a:jenkins:static_analysis_utilities:1.13
Jenkins » Static Analysis Utilities » Version: 1.14

cpe:2.3:a:jenkins:static_analysis_utilities:1.14
Jenkins » Static Analysis Utilities » Version: 1.15

cpe:2.3:a:jenkins:static_analysis_utilities:1.15
Jenkins » Static Analysis Utilities » Version: 1.16

cpe:2.3:a:jenkins:static_analysis_utilities:1.16
Jenkins » Static Analysis Utilities » Version: 1.17

cpe:2.3:a:jenkins:static_analysis_utilities:1.17
Jenkins » Static Analysis Utilities » Version: 1.18

cpe:2.3:a:jenkins:static_analysis_utilities:1.18
Jenkins » Static Analysis Utilities » Version: 1.19

cpe:2.3:a:jenkins:static_analysis_utilities:1.19
Jenkins » Static Analysis Utilities » Version: 1.2

cpe:2.3:a:jenkins:static_analysis_utilities:1.2
Jenkins » Static Analysis Utilities » Version: 1.20

cpe:2.3:a:jenkins:static_analysis_utilities:1.20
Jenkins » Static Analysis Utilities » Version: 1.21

cpe:2.3:a:jenkins:static_analysis_utilities:1.21
Jenkins » Static Analysis Utilities » Version: 1.22

cpe:2.3:a:jenkins:static_analysis_utilities:1.22
Jenkins » Static Analysis Utilities » Version: 1.23

cpe:2.3:a:jenkins:static_analysis_utilities:1.23
Jenkins » Static Analysis Utilities » Version: 1.24

cpe:2.3:a:jenkins:static_analysis_utilities:1.24
Jenkins » Static Analysis Utilities » Version: 1.25

cpe:2.3:a:jenkins:static_analysis_utilities:1.25
Jenkins » Static Analysis Utilities » Version: 1.26

cpe:2.3:a:jenkins:static_analysis_utilities:1.26
Jenkins » Static Analysis Utilities » Version: 1.27

cpe:2.3:a:jenkins:static_analysis_utilities:1.27
Jenkins » Static Analysis Utilities » Version: 1.28

cpe:2.3:a:jenkins:static_analysis_utilities:1.28
Jenkins » Static Analysis Utilities » Version: 1.29

cpe:2.3:a:jenkins:static_analysis_utilities:1.29
Jenkins » Static Analysis Utilities » Version: 1.3

cpe:2.3:a:jenkins:static_analysis_utilities:1.3
Jenkins » Static Analysis Utilities » Version: 1.30

cpe:2.3:a:jenkins:static_analysis_utilities:1.30
Jenkins » Static Analysis Utilities » Version: 1.31

cpe:2.3:a:jenkins:static_analysis_utilities:1.31
Jenkins » Static Analysis Utilities » Version: 1.32

cpe:2.3:a:jenkins:static_analysis_utilities:1.32
Jenkins » Static Analysis Utilities » Version: 1.33

cpe:2.3:a:jenkins:static_analysis_utilities:1.33
Jenkins » Static Analysis Utilities » Version: 1.34

cpe:2.3:a:jenkins:static_analysis_utilities:1.34
Jenkins » Static Analysis Utilities » Version: 1.35

cpe:2.3:a:jenkins:static_analysis_utilities:1.35
Jenkins » Static Analysis Utilities » Version: 1.36

cpe:2.3:a:jenkins:static_analysis_utilities:1.36
Jenkins » Static Analysis Utilities » Version: 1.37

cpe:2.3:a:jenkins:static_analysis_utilities:1.37
Jenkins » Static Analysis Utilities » Version: 1.38

cpe:2.3:a:jenkins:static_analysis_utilities:1.38
Jenkins » Static Analysis Utilities » Version: 1.39

cpe:2.3:a:jenkins:static_analysis_utilities:1.39
Jenkins » Static Analysis Utilities » Version: 1.4

cpe:2.3:a:jenkins:static_analysis_utilities:1.4
Jenkins » Static Analysis Utilities » Version: 1.40

cpe:2.3:a:jenkins:static_analysis_utilities:1.40
Jenkins » Static Analysis Utilities » Version: 1.41

cpe:2.3:a:jenkins:static_analysis_utilities:1.41
Jenkins » Static Analysis Utilities » Version: 1.42

cpe:2.3:a:jenkins:static_analysis_utilities:1.42
Jenkins » Static Analysis Utilities » Version: 1.43

cpe:2.3:a:jenkins:static_analysis_utilities:1.43
Jenkins » Static Analysis Utilities » Version: 1.44

cpe:2.3:a:jenkins:static_analysis_utilities:1.44
Jenkins » Static Analysis Utilities » Version: 1.45

cpe:2.3:a:jenkins:static_analysis_utilities:1.45
Jenkins » Static Analysis Utilities » Version: 1.46

cpe:2.3:a:jenkins:static_analysis_utilities:1.46
Jenkins » Static Analysis Utilities » Version: 1.47

cpe:2.3:a:jenkins:static_analysis_utilities:1.47
Jenkins » Static Analysis Utilities » Version: 1.48

cpe:2.3:a:jenkins:static_analysis_utilities:1.48
Jenkins » Static Analysis Utilities » Version: 1.49

cpe:2.3:a:jenkins:static_analysis_utilities:1.49
Jenkins » Static Analysis Utilities » Version: 1.5

cpe:2.3:a:jenkins:static_analysis_utilities:1.5
Jenkins » Static Analysis Utilities » Version: 1.50

cpe:2.3:a:jenkins:static_analysis_utilities:1.50
Jenkins » Static Analysis Utilities » Version: 1.51

cpe:2.3:a:jenkins:static_analysis_utilities:1.51
Jenkins » Static Analysis Utilities » Version: 1.52

cpe:2.3:a:jenkins:static_analysis_utilities:1.52
Jenkins » Static Analysis Utilities » Version: 1.53

cpe:2.3:a:jenkins:static_analysis_utilities:1.53
Jenkins » Static Analysis Utilities » Version: 1.54

cpe:2.3:a:jenkins:static_analysis_utilities:1.54
Jenkins » Static Analysis Utilities » Version: 1.55

cpe:2.3:a:jenkins:static_analysis_utilities:1.55
Jenkins » Static Analysis Utilities » Version: 1.56

cpe:2.3:a:jenkins:static_analysis_utilities:1.56
Jenkins » Static Analysis Utilities » Version: 1.57

cpe:2.3:a:jenkins:static_analysis_utilities:1.57
Jenkins » Static Analysis Utilities » Version: 1.58

cpe:2.3:a:jenkins:static_analysis_utilities:1.58
Jenkins » Static Analysis Utilities » Version: 1.59

cpe:2.3:a:jenkins:static_analysis_utilities:1.59
Jenkins » Static Analysis Utilities » Version: 1.6

cpe:2.3:a:jenkins:static_analysis_utilities:1.6
Jenkins » Static Analysis Utilities » Version: 1.60

cpe:2.3:a:jenkins:static_analysis_utilities:1.60
Jenkins » Static Analysis Utilities » Version: 1.61

cpe:2.3:a:jenkins:static_analysis_utilities:1.61
Jenkins » Static Analysis Utilities » Version: 1.62

cpe:2.3:a:jenkins:static_analysis_utilities:1.62
Jenkins » Static Analysis Utilities » Version: 1.63

cpe:2.3:a:jenkins:static_analysis_utilities:1.63
Jenkins » Static Analysis Utilities » Version: 1.64

cpe:2.3:a:jenkins:static_analysis_utilities:1.64
Jenkins » Static Analysis Utilities » Version: 1.65

cpe:2.3:a:jenkins:static_analysis_utilities:1.65
Jenkins » Static Analysis Utilities » Version: 1.66

cpe:2.3:a:jenkins:static_analysis_utilities:1.66
Jenkins » Static Analysis Utilities » Version: 1.67

cpe:2.3:a:jenkins:static_analysis_utilities:1.67
Jenkins » Static Analysis Utilities » Version: 1.68

cpe:2.3:a:jenkins:static_analysis_utilities:1.68
Jenkins » Static Analysis Utilities » Version: 1.69

cpe:2.3:a:jenkins:static_analysis_utilities:1.69
Jenkins » Static Analysis Utilities » Version: 1.7

cpe:2.3:a:jenkins:static_analysis_utilities:1.7
Jenkins » Static Analysis Utilities » Version: 1.70

cpe:2.3:a:jenkins:static_analysis_utilities:1.70
Jenkins » Static Analysis Utilities » Version: 1.71

cpe:2.3:a:jenkins:static_analysis_utilities:1.71
Jenkins » Static Analysis Utilities » Version: 1.72

cpe:2.3:a:jenkins:static_analysis_utilities:1.72
Jenkins » Static Analysis Utilities » Version: 1.73

cpe:2.3:a:jenkins:static_analysis_utilities:1.73
Jenkins » Static Analysis Utilities » Version: 1.74

cpe:2.3:a:jenkins:static_analysis_utilities:1.74
Jenkins » Static Analysis Utilities » Version: 1.75

cpe:2.3:a:jenkins:static_analysis_utilities:1.75
Jenkins » Static Analysis Utilities » Version: 1.76

cpe:2.3:a:jenkins:static_analysis_utilities:1.76
Jenkins » Static Analysis Utilities » Version: 1.77

cpe:2.3:a:jenkins:static_analysis_utilities:1.77
Jenkins » Static Analysis Utilities » Version: 1.78

cpe:2.3:a:jenkins:static_analysis_utilities:1.78
Jenkins » Static Analysis Utilities » Version: 1.79

cpe:2.3:a:jenkins:static_analysis_utilities:1.79
Jenkins » Static Analysis Utilities » Version: 1.8

cpe:2.3:a:jenkins:static_analysis_utilities:1.8
Jenkins » Static Analysis Utilities » Version: 1.80

cpe:2.3:a:jenkins:static_analysis_utilities:1.80
Jenkins » Static Analysis Utilities » Version: 1.81

cpe:2.3:a:jenkins:static_analysis_utilities:1.81
Jenkins » Static Analysis Utilities » Version: 1.82

cpe:2.3:a:jenkins:static_analysis_utilities:1.82
Jenkins » Static Analysis Utilities » Version: 1.83

cpe:2.3:a:jenkins:static_analysis_utilities:1.83
Jenkins » Static Analysis Utilities » Version: 1.84

cpe:2.3:a:jenkins:static_analysis_utilities:1.84
Jenkins » Static Analysis Utilities » Version: 1.85

cpe:2.3:a:jenkins:static_analysis_utilities:1.85
Jenkins » Static Analysis Utilities » Version: 1.86

cpe:2.3:a:jenkins:static_analysis_utilities:1.86
Jenkins » Static Analysis Utilities » Version: 1.87

cpe:2.3:a:jenkins:static_analysis_utilities:1.87
Jenkins » Static Analysis Utilities » Version: 1.88

cpe:2.3:a:jenkins:static_analysis_utilities:1.88
Jenkins » Static Analysis Utilities » Version: 1.89

cpe:2.3:a:jenkins:static_analysis_utilities:1.89
Jenkins » Static Analysis Utilities » Version: 1.9

cpe:2.3:a:jenkins:static_analysis_utilities:1.9
Jenkins » Static Analysis Utilities » Version: 1.90

cpe:2.3:a:jenkins:static_analysis_utilities:1.90
Jenkins » Static Analysis Utilities » Version: 1.91

cpe:2.3:a:jenkins:static_analysis_utilities:1.91
Jenkins » Static Analysis Utilities » Version: 1.92

cpe:2.3:a:jenkins:static_analysis_utilities:1.92
Jenkins » Static Analysis Utilities » Version: 1.93

cpe:2.3:a:jenkins:static_analysis_utilities:1.93
Jenkins » Static Analysis Utilities » Version: 1.94

cpe:2.3:a:jenkins:static_analysis_utilities:1.94
Jenkins » Static Analysis Utilities » Version: 1.95

cpe:2.3:a:jenkins:static_analysis_utilities:1.95

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-10308

Products

Pricing

Contact Us