CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2019-10470

A missing permission check in Jenkins ElasticBox Jenkins Kubernetes CI/CD Plugin in form-related methods allowed users with Overall/Read access to enumerate credentials ID of credentials stored in Jenkins.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 14.8%

CVSS Severity

CVSS v3 Score 6.5

CVSS v2 Score 4.0

References

http://www.openwall.com/lists/oss-security/2019/10/23/2
https://jenkins.io/security/advisory/2019-10-23/#SECURITY-1005%20%282%29
http://www.openwall.com/lists/oss-security/2019/10/23/2
https://jenkins.io/security/advisory/2019-10-23/#SECURITY-1005%20%282%29

Products affected by CVE-2019-10470

Jenkins » Kubernetes Ci » Version: 0.1

cpe:2.3:a:jenkins:kubernetes_ci:0.1
Jenkins » Kubernetes Ci » Version: 1.0

cpe:2.3:a:jenkins:kubernetes_ci:1.0
Jenkins » Kubernetes Ci » Version: 1.1

cpe:2.3:a:jenkins:kubernetes_ci:1.1
Jenkins » Kubernetes Ci » Version: 1.2

cpe:2.3:a:jenkins:kubernetes_ci:1.2
Jenkins » Kubernetes Ci » Version: 1.3

cpe:2.3:a:jenkins:kubernetes_ci:1.3

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-10470

Products

Pricing

Contact Us