← CVE Intelligence

CVE-2019-1003019

Jenkins project / Jenkins GitHub Authentication Plugin PUBLISHED

Description (CNA)

An session fixation vulnerability exists in Jenkins GitHub Authentication Plugin 0.29 and earlier in GithubSecurityRealm.java that allows unauthorized attackers to impersonate another user if they can control the pre-authentication session.

Affected (CNA)

Vendor / productVersions
Jenkins project / Jenkins GitHub Authentication Pluginaffected 0.29 and earlier

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.